Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

v1.14 backports 2023-08-23 #27654

Closed
wants to merge 5 commits into from

Conversation

sayboras
Copy link
Member

Once this PR is merged, you can update the PR labels via:

$ for pr in 25885 27472; do contrib/backporting/set-labels.py $pr done 1.14; done

meyskens and others added 5 commits August 23, 2023 21:45
[ upstream commit 74d3f37 ]

This refactors the Gateway API code to re-use the route checks functions
into a separate package with route checks which can be used for any
Gateway API route type.
This allows for easier code re-use for later route implementations as
well as better readability.

Signed-off-by: Maartje Eyskens <maartje.eyskens@isovalent.com>
Signed-off-by: Tam Mach <tam.mach@cilium.io>
[ upstream commit 86bd1f8 ]

This is to add the support for extended feature HTTPRouteHostRewrite.

Signed-off-by: Tam Mach <tam.mach@cilium.io>
[ upstream commit 3cf560f ]

For prefix rewrite to work, we need to change the prefix match based on
regex to PathSeparatedPrefix route match, so that the prefix match is
recognized correctly.

Signed-off-by: Tam Mach <tam.mach@cilium.io>
[ upstream commit 8dc1ae8 ]

This commit is to enable HTTP redirect for port, schema and path. Small
fix for TLS filter match on server name is done to avoid the below
issue.

As part of recent changes in upstream, if scheme and port are not
specified, gateway listener port must be used.

```console
2023-08-16T11:28:20.797264246Z level=warning msg="NACK received for versions after 52 and up to 53; waiting for a version update before sending again" subsys=xds xdsAckedVersion=52 xdsClientNode="host~127.0.0.1~no-id~localdomain" xdsDetail="Error adding/updating listener(s) gateway-conformance-infra/cilium-gateway-same-namespace-with-https-listener/listener: error adding listener '127.0.0.1:10605': partial wildcards are not supported in \"server_names\"\n" xdsNonce=53 xdsStreamID=2 xdsTypeURL=type.googleapis.com/envoy.config.listener.v3.Listener
```

Signed-off-by: Tam Mach <tam.mach@cilium.io>
[ upstream commit cda37f6 ]

All validation logic in HTTPRoute is applied the same as with the normal
backend, as backend for mirror requests is consolidated and merged with
other backends in the same HTTPRoute.

Signed-off-by: Tam Mach <tam.mach@cilium.io>
@sayboras sayboras requested review from a team as code owners August 23, 2023 11:50
@sayboras sayboras added kind/backports This PR provides functionality previously merged into master. backport/1.14 This PR represents a backport for Cilium 1.14.x of a PR that was merged to main. labels Aug 23, 2023
@sayboras sayboras requested a review from meyskens August 23, 2023 11:50
@sayboras sayboras closed this Aug 23, 2023
@sayboras sayboras deleted the pr/v1.14-backport-2023-08-23 branch August 23, 2023 11:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport/1.14 This PR represents a backport for Cilium 1.14.x of a PR that was merged to main. kind/backports This PR provides functionality previously merged into master.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants