Skip to content

[release/v1.8] cherry-pick v1.8.0 #8970

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jukie merged 13 commits into from
May 13, 2026
Merged

[release/v1.8] cherry-pick v1.8.0 #8970

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
13 commits
Select commit Hold shift + click to select a range
514843e
fix(api): increase RateLimitSelectCondition.headers MaxItems from 16 …
wucm667 May 4, 2026
9eb0e67
feat: policy field owner (#8538)
kkk777-7 May 4, 2026
568611a
skip invalid listener first in IR (#8577)
zirain May 4, 2026
c481c91
fix: remove cross ns policy attachment status (#8901)
zhaohuabing May 6, 2026
707e11f
feat: add runner event metrics (#8802)
zirain May 7, 2026
f9d9963
fix: respect backend endpoint hostname for health checks (#8929)
arkodg May 8, 2026
075434e
fix(helm): propagate commonLabels to RBAC resources (#8818)
mvanhorn May 8, 2026
09fcd03
fix(translator): set ListenerSet and listener Accepted:True for Inval…
apkatsikas May 8, 2026
83a083b
fix: do not downgrade ALPN for only hostnames-overlapping listeners (…
zhaohuabing May 8, 2026
6e4eaf8
feat: enableDeferredCreationStats by default (#8937)
zirain May 8, 2026
883cb2e
fix: restore last transition time in merge status conditions (#8962)
rudrakhp May 12, 2026
27f6d23
[release/v1.8] v1.8.0 release notes
jukie May 13, 2026
ead8766
Merge branch 'release/v1.8' into cherry-pick-v1.8.0
jukie May 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion VERSION
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1 @@
v1.8.0-rc.1
v1.8.0
5 changes: 3 additions & 2 deletions api/v1alpha1/healthcheck_types.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -177,8 +177,9 @@ const (

// HTTPActiveHealthChecker defines the settings of http health check.
type HTTPActiveHealthChecker struct {
// Hostname defines the HTTP host that will be requested during health checking.
// Default: HTTPRoute or GRPCRoute hostname.
// Hostname defines the HTTP Host header used for active HTTP health checks.
// Host selection uses this order: this field, the associated Backend endpoint
// hostname if available, then the effective Route hostname.
//
// +kubebuilder:validation:MinLength=1
// +kubebuilder:validation:MaxLength=253
Expand Down
4 changes: 4 additions & 0 deletions api/v1alpha1/policy_helpers.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -58,6 +58,10 @@ type TargetSelector struct {
// When specified, the effective set of namespaces is always constrained to the
// namespaces watched by Envoy Gateway.
//
// Selecting targets across namespaces requires a ReferenceGrant in the target
// namespace that allows this policy kind to reference the selected target kind.
// Cross-namespace targets without a matching ReferenceGrant are ignored.
//
// +optional
Namespaces *TargetSelectorNamespaces `json:"namespaces,omitempty"`

Expand Down
2 changes: 1 addition & 1 deletion api/v1alpha1/ratelimit_types.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -228,7 +228,7 @@ type RateLimitSelectCondition struct {
// meaning, a request MUST match all the specified headers.
//
// +optional
// +kubebuilder:validation:MaxItems=16
// +kubebuilder:validation:MaxItems=64
Headers []HeaderMatch `json:"headers,omitempty"`

// Methods is a list of request methods to match. Multiple method values are ORed together,
Expand Down
4 changes: 0 additions & 4 deletions api/v1alpha1/shared_types.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -70,10 +70,6 @@ const (
// PolicyReasonDeprecatedField is used with the "Warning" condition when the policy
// uses deprecated fields that should be migrated to newer alternatives.
PolicyReasonDeprecatedField gwapiv1.PolicyConditionReason = "DeprecatedField"

// PolicyReasonRefNotPermitted is used when the policy targets a cross-namespace
// object without a matching ReferenceGrant.
PolicyReasonRefNotPermitted gwapiv1.PolicyConditionReason = "RefNotPermitted"
)

// GroupVersionKind unambiguously identifies a Kind.
Expand Down
13 changes: 9 additions & 4 deletions ...s/gateway-crds-helm/templates/generated/gateway.envoyproxy.io_backendtrafficpolicies.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -671,8 +671,9 @@ spec:
type: array
hostname:
description: |-
Hostname defines the HTTP host that will be requested during health checking.
Default: HTTPRoute or GRPCRoute hostname.
Hostname defines the HTTP Host header used for active HTTP health checks.
Host selection uses this order: this field, the associated Backend endpoint
hostname if available, then the effective Route hostname.
maxLength: 253
minLength: 1
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
Expand Down Expand Up @@ -1506,7 +1507,7 @@ spec:
required:
- name
type: object
maxItems: 16
maxItems: 64
type: array
methods:
description: |-
Expand Down Expand Up @@ -1890,7 +1891,7 @@ spec:
required:
- name
type: object
maxItems: 16
maxItems: 64
type: array
methods:
description: |-
Expand Down Expand Up @@ -2924,6 +2925,10 @@ spec:

When specified, the effective set of namespaces is always constrained to the
namespaces watched by Envoy Gateway.

Selecting targets across namespaces requires a ReferenceGrant in the target
namespace that allows this policy kind to reference the selected target kind.
Cross-namespace targets without a matching ReferenceGrant are ignored.
properties:
from:
default: Same
Expand Down
4 changes: 4 additions & 0 deletions ...ts/gateway-crds-helm/templates/generated/gateway.envoyproxy.io_clienttrafficpolicies.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1181,6 +1181,10 @@ spec:
When specified, the effective set of namespaces is always constrained to the
namespaces watched by Envoy Gateway.
Selecting targets across namespaces requires a ReferenceGrant in the target
namespace that allows this policy kind to reference the selected target kind.
Cross-namespace targets without a matching ReferenceGrant are ignored.
properties:
from:
default: Same
Expand Down
9 changes: 7 additions & 2 deletions ...s/gateway-crds-helm/templates/generated/gateway.envoyproxy.io_envoyextensionpolicies.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -567,8 +567,9 @@ spec:
type: array
hostname:
description: |-
Hostname defines the HTTP host that will be requested during health checking.
Default: HTTPRoute or GRPCRoute hostname.
Hostname defines the HTTP Host header used for active HTTP health checks.
Host selection uses this order: this field, the associated Backend endpoint
hostname if available, then the effective Route hostname.
maxLength: 253
minLength: 1
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
Expand Down Expand Up @@ -1824,6 +1825,10 @@ spec:

When specified, the effective set of namespaces is always constrained to the
namespaces watched by Envoy Gateway.

Selecting targets across namespaces requires a ReferenceGrant in the target
namespace that allows this policy kind to reference the selected target kind.
Cross-namespace targets without a matching ReferenceGrant are ignored.
properties:
from:
default: Same
Expand Down
20 changes: 12 additions & 8 deletions charts/gateway-crds-helm/templates/generated/gateway.envoyproxy.io_envoyproxies.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11837,8 +11837,9 @@ spec:
type: array
hostname:
description: |-
Hostname defines the HTTP host that will be requested during health checking.
Default: HTTPRoute or GRPCRoute hostname.
Hostname defines the HTTP Host header used for active HTTP health checks.
Host selection uses this order: this field, the associated Backend endpoint
hostname if available, then the effective Route hostname.
maxLength: 253
minLength: 1
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
Expand Down Expand Up @@ -13368,8 +13369,9 @@ spec:
type: array
hostname:
description: |-
Hostname defines the HTTP host that will be requested during health checking.
Default: HTTPRoute or GRPCRoute hostname.
Hostname defines the HTTP Host header used for active HTTP health checks.
Host selection uses this order: this field, the associated Backend endpoint
hostname if available, then the effective Route hostname.
maxLength: 253
minLength: 1
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
Expand Down Expand Up @@ -15086,8 +15088,9 @@ spec:
type: array
hostname:
description: |-
Hostname defines the HTTP host that will be requested during health checking.
Default: HTTPRoute or GRPCRoute hostname.
Hostname defines the HTTP Host header used for active HTTP health checks.
Host selection uses this order: this field, the associated Backend endpoint
hostname if available, then the effective Route hostname.
maxLength: 253
minLength: 1
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
Expand Down Expand Up @@ -16694,8 +16697,9 @@ spec:
type: array
hostname:
description: |-
Hostname defines the HTTP host that will be requested during health checking.
Default: HTTPRoute or GRPCRoute hostname.
Hostname defines the HTTP Host header used for active HTTP health checks.
Host selection uses this order: this field, the associated Backend endpoint
hostname if available, then the effective Route hostname.
maxLength: 253
minLength: 1
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
Expand Down
24 changes: 16 additions & 8 deletions charts/gateway-crds-helm/templates/generated/gateway.envoyproxy.io_securitypolicies.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1194,8 +1194,9 @@ spec:
type: array
hostname:
description: |-
Hostname defines the HTTP host that will be requested during health checking.
Default: HTTPRoute or GRPCRoute hostname.
Hostname defines the HTTP Host header used for active HTTP health checks.
Host selection uses this order: this field, the associated Backend endpoint
hostname if available, then the effective Route hostname.
maxLength: 253
minLength: 1
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
Expand Down Expand Up @@ -2597,8 +2598,9 @@ spec:
type: array
hostname:
description: |-
Hostname defines the HTTP host that will be requested during health checking.
Default: HTTPRoute or GRPCRoute hostname.
Hostname defines the HTTP Host header used for active HTTP health checks.
Host selection uses this order: this field, the associated Backend endpoint
hostname if available, then the effective Route hostname.
maxLength: 253
minLength: 1
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
Expand Down Expand Up @@ -4279,8 +4281,9 @@ spec:
type: array
hostname:
description: |-
Hostname defines the HTTP host that will be requested during health checking.
Default: HTTPRoute or GRPCRoute hostname.
Hostname defines the HTTP Host header used for active HTTP health checks.
Host selection uses this order: this field, the associated Backend endpoint
hostname if available, then the effective Route hostname.
maxLength: 253
minLength: 1
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
Expand Down Expand Up @@ -5993,8 +5996,9 @@ spec:
type: array
hostname:
description: |-
Hostname defines the HTTP host that will be requested during health checking.
Default: HTTPRoute or GRPCRoute hostname.
Hostname defines the HTTP Host header used for active HTTP health checks.
Host selection uses this order: this field, the associated Backend endpoint
hostname if available, then the effective Route hostname.
maxLength: 253
minLength: 1
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
Expand Down Expand Up @@ -7142,6 +7146,10 @@ spec:

When specified, the effective set of namespaces is always constrained to the
namespaces watched by Envoy Gateway.

Selecting targets across namespaces requires a ReferenceGrant in the target
namespace that allows this policy kind to reference the selected target kind.
Cross-namespace targets without a matching ReferenceGrant are ignored.
properties:
from:
default: Same
Expand Down
13 changes: 9 additions & 4 deletions ...gateway-helm/charts/crds/crds/generated/gateway.envoyproxy.io_backendtrafficpolicies.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -670,8 +670,9 @@ spec:
type: array
hostname:
description: |-
Hostname defines the HTTP host that will be requested during health checking.
Default: HTTPRoute or GRPCRoute hostname.
Hostname defines the HTTP Host header used for active HTTP health checks.
Host selection uses this order: this field, the associated Backend endpoint
hostname if available, then the effective Route hostname.
maxLength: 253
minLength: 1
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
Expand Down Expand Up @@ -1505,7 +1506,7 @@ spec:
required:
- name
type: object
maxItems: 16
maxItems: 64
type: array
methods:
description: |-
Expand Down Expand Up @@ -1889,7 +1890,7 @@ spec:
required:
- name
type: object
maxItems: 16
maxItems: 64
type: array
methods:
description: |-
Expand Down Expand Up @@ -2923,6 +2924,10 @@ spec:

When specified, the effective set of namespaces is always constrained to the
namespaces watched by Envoy Gateway.

Selecting targets across namespaces requires a ReferenceGrant in the target
namespace that allows this policy kind to reference the selected target kind.
Cross-namespace targets without a matching ReferenceGrant are ignored.
properties:
from:
default: Same
Expand Down
4 changes: 4 additions & 0 deletions .../gateway-helm/charts/crds/crds/generated/gateway.envoyproxy.io_clienttrafficpolicies.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1180,6 +1180,10 @@ spec:
When specified, the effective set of namespaces is always constrained to the
namespaces watched by Envoy Gateway.
Selecting targets across namespaces requires a ReferenceGrant in the target
namespace that allows this policy kind to reference the selected target kind.
Cross-namespace targets without a matching ReferenceGrant are ignored.
properties:
from:
default: Same
Expand Down
9 changes: 7 additions & 2 deletions ...gateway-helm/charts/crds/crds/generated/gateway.envoyproxy.io_envoyextensionpolicies.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -566,8 +566,9 @@ spec:
type: array
hostname:
description: |-
Hostname defines the HTTP host that will be requested during health checking.
Default: HTTPRoute or GRPCRoute hostname.
Hostname defines the HTTP Host header used for active HTTP health checks.
Host selection uses this order: this field, the associated Backend endpoint
hostname if available, then the effective Route hostname.
maxLength: 253
minLength: 1
pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
Expand Down Expand Up @@ -1823,6 +1824,10 @@ spec:

When specified, the effective set of namespaces is always constrained to the
namespaces watched by Envoy Gateway.

Selecting targets across namespaces requires a ReferenceGrant in the target
namespace that allows this policy kind to reference the selected target kind.
Cross-namespace targets without a matching ReferenceGrant are ignored.
properties:
from:
default: Same
Expand Down
Loading
Loading