Skip to content

[release/v1.7] cherry-pick for v1.7.2#8768

Merged
cnvergence merged 15 commits intoenvoyproxy:release/v1.7from
cnvergence:cherry-pick-v1.7.2
Apr 16, 2026
Merged

[release/v1.7] cherry-pick for v1.7.2#8768
cnvergence merged 15 commits intoenvoyproxy:release/v1.7from
cnvergence:cherry-pick-v1.7.2

Conversation

@cnvergence
Copy link
Copy Markdown
Member

@cnvergence cnvergence commented Apr 16, 2026

@cnvergence cnvergence requested a review from a team as a code owner April 16, 2026 08:24
rudrakhp and others added 12 commits April 16, 2026 10:26
Signed-off-by: Rudrakh Panigrahi <rudrakh97@gmail.com>
(cherry picked from commit b0638d5)
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
perf: use LuaPerRoute instead of FilterConfig

Signed-off-by: Rudrakh Panigrahi <rudrakh97@gmail.com>
(cherry picked from commit f31ac4e)
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
… host (envoyproxy#8565)

* fix: per-endpoint hostname override blocked by auto-generated wildcard host

Signed-off-by: zirain <zirain2009@gmail.com>

* add UT

Signed-off-by: zirain <zirain2009@gmail.com>

---------

Signed-off-by: zirain <zirain2009@gmail.com>
(cherry picked from commit 595010a)
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
* fix bug with grpcroute mirror filter

Signed-off-by: Adam Buran <aburan@roblox.com>

* add indexers test

Signed-off-by: Adam Buran <aburan@roblox.com>

* add release note

Signed-off-by: Adam Buran <aburan@roblox.com>

---------

Signed-off-by: Adam Buran <aburan@roblox.com>
Signed-off-by: Arko Dasgupta <arkodg@users.noreply.github.com>
Co-authored-by: Arko Dasgupta <arkodg@users.noreply.github.com>
(cherry picked from commit e633c08)
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
…yproxy#8557)

Fixes envoyproxy#8554

Signed-off-by: stekole <stefan@sandnetworks.com>
Signed-off-by: stekole <30674956+stekole@users.noreply.github.com>
(cherry picked from commit 9cac348)
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
…oxy#8480)

* fix: avoid metric increments on no-op delete reconcile paths

Signed-off-by: Felipe Sabadini Facina <fsabadini@hotmail.com>

* Update internal/infrastructure/kubernetes/infra_resource_test.go

Signed-off-by: Isaac Wilson <isaac.wilson514@gmail.com>

* Update internal/infrastructure/kubernetes/infra_resource_test.go

Signed-off-by: Isaac Wilson <isaac.wilson514@gmail.com>

---------

Signed-off-by: Felipe Sabadini Facina <fsabadini@hotmail.com>
Signed-off-by: Isaac Wilson <isaac.wilson514@gmail.com>
Co-authored-by: Isaac Wilson <isaac.wilson514@gmail.com>
(cherry picked from commit 7a2a4ec)
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
…yproxy#8545)

* fix(telemetry): support BackendTLSPolicy for telemetry backends

processBackendRefs does not look up BackendTLSPolicy for telemetry
backends (access logs, tracing, metrics), so TLS can only be configured
via Backend.spec.tls. Replace inline processServerValidationTLSSettings
with applyBackendTLSSetting so telemetry backends get the full Backend +
BackendTLSPolicy + EnvoyProxy TLS merge.

Workaround: envoyproxy/ai-gateway#1964

Signed-off-by: Adrian Cole <adrian@tetrate.io>
(cherry picked from commit ac18feb)
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
…le (envoyproxy#8656)

Fixes envoyproxy#8651

Signed-off-by: Felipe Sabadini Facina <fsabadini@hotmail.com>
(cherry picked from commit 2a5bfd0)
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>
(cherry picked from commit fa81778)
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
… referenced by a SecurityPolicy extAuth Backend (envoyproxy#8654)

* fix: client certificate secret never delivered when it is exclusively referenced by a SecurityPolicy extAuth Backend

Signed-off-by: zirain <zirain2009@gmail.com>

* fix lint

Signed-off-by: zirain <zirain2009@gmail.com>

---------

Signed-off-by: zirain <zirain2009@gmail.com>
(cherry picked from commit c7e21fa)
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
… referenced by a SecurityPolicy jwt/oidc Backend (envoyproxy#8711)

Signed-off-by: zirain <zirain2009@gmail.com>
(cherry picked from commit 95c3a79)
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
…paces (envoyproxy#8706)

* fix: helm secrets rbac for gateway namespace with watch list of namespaces

Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>

* add release notes

Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>

* review update

Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>

---------

Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
Co-authored-by: Rudrakh Panigrahi <rudrakh97@gmail.com>
(cherry picked from commit c48a346)
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 843559dd8d

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread internal/gatewayapi/listener.go Outdated
zirain
zirain previously approved these changes Apr 16, 2026
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
Signed-off-by: Karol Szwaj <karol.szwaj@gmail.com>
@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 16, 2026

Codecov Report

❌ Patch coverage is 79.35484% with 32 lines in your changes missing coverage. Please review.
✅ Project coverage is 73.80%. Comparing base (09d3981) to head (79d2a31).
⚠️ Report is 1 commits behind head on release/v1.7.

Files with missing lines Patch % Lines
...ternal/infrastructure/kubernetes/infra_resource.go 83.58% 7 Missing and 4 partials ⚠️
internal/xds/translator/extauth.go 25.00% 2 Missing and 4 partials ⚠️
internal/xds/translator/translator.go 53.84% 3 Missing and 3 partials ⚠️
internal/xds/translator/lua.go 81.25% 1 Missing and 2 partials ⚠️
internal/gatewayapi/listener.go 90.47% 1 Missing and 1 partial ⚠️
internal/xds/translator/jwt.go 0.00% 1 Missing and 1 partial ⚠️
internal/xds/translator/oidc.go 0.00% 1 Missing and 1 partial ⚠️
Additional details and impacted files
@@               Coverage Diff                @@
##           release/v1.7    #8768      +/-   ##
================================================
+ Coverage         73.71%   73.80%   +0.08%     
================================================
  Files               241      241              
  Lines             36718    36803      +85     
================================================
+ Hits              27068    27161      +93     
+ Misses             7741     7734       -7     
+ Partials           1909     1908       -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@cnvergence
Copy link
Copy Markdown
Member Author

/retest

1 similar comment
@cnvergence
Copy link
Copy Markdown
Member Author

/retest

@cnvergence cnvergence merged commit 005d80e into envoyproxy:release/v1.7 Apr 16, 2026
66 of 72 checks passed
@cnvergence cnvergence deleted the cherry-pick-v1.7.2 branch April 16, 2026 20:26
eleboucher pushed a commit to eleboucher/homelab that referenced this pull request Apr 17, 2026
…1.7.1 → v1.7.2) (#201)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [mirror.gcr.io/envoyproxy/gateway-helm](https://gateway.envoyproxy.io/) ([source](https://github.com/envoyproxy/gateway)) | patch | `v1.7.1` → `v1.7.2` |

---

### Release Notes

<details>
<summary>envoyproxy/gateway (mirror.gcr.io/envoyproxy/gateway-helm)</summary>

### [`v1.7.2`](https://github.com/envoyproxy/gateway/releases/tag/v1.7.2)

[Compare Source](envoyproxy/gateway@v1.7.2...v1.7.2)

##### Release Announcement

Check out the \[v1.7.2  release announcement]
(<https://gateway.envoyproxy.io/news/releases/notes/v1.7.2>) to learn more about the release.

##### What's Changed

- \[release/v1.7] bump envoy to 1.37.2 and ratelimit to [`05c08d0`](envoyproxy/gateway@05c08d03) by [@&#8203;cnvergence](https://github.com/cnvergence) in [#&#8203;8763](envoyproxy/gateway#8763)
- \[release/v1.7] cherry-pick for v1.7.2 by [@&#8203;cnvergence](https://github.com/cnvergence) in [#&#8203;8768](envoyproxy/gateway#8768)
- \[release/v1.7] bump go to 1.25.9 by [@&#8203;cnvergence](https://github.com/cnvergence) in [#&#8203;8776](envoyproxy/gateway#8776)

**Full Changelog**: <envoyproxy/gateway@v1.7.1...v1.7.2>

### [`v1.7.2`](https://github.com/envoyproxy/gateway/releases/tag/v1.7.2)

[Compare Source](envoyproxy/gateway@v1.7.1...v1.7.2)

##### Release Announcement

Check out the \[v1.7.2  release announcement]
(<https://gateway.envoyproxy.io/news/releases/notes/v1.7.2>) to learn more about the release.

##### What's Changed

- \[release/v1.7] bump envoy to 1.37.2 and ratelimit to [`05c08d0`](envoyproxy/gateway@05c08d03) by [@&#8203;cnvergence](https://github.com/cnvergence) in [#&#8203;8763](envoyproxy/gateway#8763)
- \[release/v1.7] cherry-pick for v1.7.2 by [@&#8203;cnvergence](https://github.com/cnvergence) in [#&#8203;8768](envoyproxy/gateway#8768)
- \[release/v1.7] bump go to 1.25.9 by [@&#8203;cnvergence](https://github.com/cnvergence) in [#&#8203;8776](envoyproxy/gateway#8776)

**Full Changelog**: <envoyproxy/gateway@v1.7.1...v1.7.2>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEwMS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->

Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/201
eleboucher pushed a commit to eleboucher/homelab that referenced this pull request Apr 17, 2026
… → 1.7.2) (#200)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [docker.io/envoyproxy/gateway-helm](https://gateway.envoyproxy.io/) ([source](https://github.com/envoyproxy/gateway)) | patch | `1.7.1` → `1.7.2` |

---

### Release Notes

<details>
<summary>envoyproxy/gateway (docker.io/envoyproxy/gateway-helm)</summary>

### [`v1.7.2`](https://github.com/envoyproxy/gateway/releases/tag/v1.7.2)

[Compare Source](envoyproxy/gateway@v1.7.2...v1.7.2)

##### Release Announcement

Check out the \[v1.7.2  release announcement]
(<https://gateway.envoyproxy.io/news/releases/notes/v1.7.2>) to learn more about the release.

##### What's Changed

- \[release/v1.7] bump envoy to 1.37.2 and ratelimit to [`05c08d0`](envoyproxy/gateway@05c08d03) by [@&#8203;cnvergence](https://github.com/cnvergence) in [#&#8203;8763](envoyproxy/gateway#8763)
- \[release/v1.7] cherry-pick for v1.7.2 by [@&#8203;cnvergence](https://github.com/cnvergence) in [#&#8203;8768](envoyproxy/gateway#8768)
- \[release/v1.7] bump go to 1.25.9 by [@&#8203;cnvergence](https://github.com/cnvergence) in [#&#8203;8776](envoyproxy/gateway#8776)

**Full Changelog**: <envoyproxy/gateway@v1.7.1...v1.7.2>

### [`v1.7.2`](https://github.com/envoyproxy/gateway/releases/tag/v1.7.2)

[Compare Source](envoyproxy/gateway@v1.7.1...v1.7.2)

##### Release Announcement

Check out the \[v1.7.2  release announcement]
(<https://gateway.envoyproxy.io/news/releases/notes/v1.7.2>) to learn more about the release.

##### What's Changed

- \[release/v1.7] bump envoy to 1.37.2 and ratelimit to [`05c08d0`](envoyproxy/gateway@05c08d03) by [@&#8203;cnvergence](https://github.com/cnvergence) in [#&#8203;8763](envoyproxy/gateway#8763)
- \[release/v1.7] cherry-pick for v1.7.2 by [@&#8203;cnvergence](https://github.com/cnvergence) in [#&#8203;8768](envoyproxy/gateway#8768)
- \[release/v1.7] bump go to 1.25.9 by [@&#8203;cnvergence](https://github.com/cnvergence) in [#&#8203;8776](envoyproxy/gateway#8776)

**Full Changelog**: <envoyproxy/gateway@v1.7.1...v1.7.2>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjEwMS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZS9jb250YWluZXIiLCJ0eXBlL3BhdGNoIl19-->

Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/200
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants