Skip to content

docs: ClusterTrustBundle Support in BackendTLSPolicy #6714

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
zirain merged 1 commit into from
Aug 8, 2025
Merged

docs: ClusterTrustBundle Support in BackendTLSPolicy #6714

zirain merged 1 commit into from
Aug 8, 2025
+31 −7

Conversation

@zirain
Copy link
Member

@zirain zirain commented Aug 6, 2025

fixes: #6585

@zirain zirain requested a review from a team as a code owner August 6, 2025 08:47
@codecov
Copy link

codecov bot commented Aug 6, 2025 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 71.08%. Comparing base (958ef7a) to head (876c0e1).
⚠️ Report is 11 commits behind head on main.

Additional details and impacted files 
@@            Coverage Diff             @@
##             main    #6714      +/-   ##
==========================================
+ Coverage   71.04%   71.08%   +0.04%     
==========================================
  Files         224      224              
  Lines       39615    39615              
==========================================
+ Hits        28144    28161      +17     
+ Misses       9812     9797      -15     
+ Partials     1659     1657       -2

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

arkodg
arkodg reviewed Aug 6, 2025
View reviewed changes
site/content/en/latest/tasks/security/backend-tls.md
name: example-ca
spec:
trustBundle: |
[content from ca.crt]
Copy link
Contributor

@arkodg arkodg Aug 6, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is this valid ? will this command work ?

Copy link
Member Author

@zirain zirain Aug 7, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

it need users to handle the indentation correctly, I didn't figure out a easy way.

arkodg
arkodg reviewed Aug 6, 2025
View reviewed changes
site/content/en/latest/tasks/security/backend-tls.md

{{< tabpane text=true >}}
{{% tab header="Apply from stdin" %}}
{{% tab header="ConfigMap" %}}
Copy link
Contributor

@arkodg arkodg Aug 6, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

curious why this changed

Copy link
Member Author

@zirain zirain Aug 7, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we need to support both ConfigMap/ClusterTrustBundle.

TBH, that apply from file seems useless.

@arkodg arkodg requested review from a team August 7, 2025 23:36
@arkodg arkodg modified the milestones: v1.5.0 Release, Backlog Aug 7, 2025
@zirain zirain merged commit dad093d into envoyproxy:main Aug 8, 2025
33 checks passed
@zirain zirain deleted the docs/backendtlspolicy-clustertrustbundle branch August 8, 2025 00:20
zirain added a commit to zirain/gateway that referenced this pull request Aug 8, 2025
@zirain
docs: ClusterTrustBundle Support in BackendTLSPolicy (envoyproxy#6714)
2d27027 
Signed-off-by: zirain <[email protected]>
zirain added a commit to zirain/gateway that referenced this pull request Aug 8, 2025
@zirain
docs: ClusterTrustBundle Support in BackendTLSPolicy (envoyproxy#6714)
9921166 
Signed-off-by: zirain <[email protected]>
zirain added a commit that referenced this pull request Aug 8, 2025
@zirain @arkodg
@commoddity @rpahli @maxbrunet @jukie
[release-1.5] cherry pick for v1.5.0 (#6738)
c2e5b2e 
* docs: rm latest from install egctl docs (#6700)

* we've removed the latest egctl artifacts

Relates to #6551

Signed-off-by: Arko Dasgupta <[email protected]>
Signed-off-by: zirain <[email protected]>

* chore: fix globalResources in GNM (#6701)

Signed-off-by: zirain <[email protected]>

* move ordering gateway-api resources to provider (#6695)

Signed-off-by: zirain <[email protected]>

* Rate Limiter: Enable rate limit for month and year (#6715)

* update go control plane rate limiter version

Signed-off-by: Pascal van Leeuwen <[email protected]>

* enable rate limit for month and year

Signed-off-by: Pascal van Leeuwen <[email protected]>

* add attribution

Signed-off-by: Pascal van Leeuwen <[email protected]>

* fix gen

Signed-off-by: Pascal van Leeuwen <[email protected]>

* remove helm binaries

Signed-off-by: Pascal van Leeuwen <[email protected]>

---------

Signed-off-by: Pascal van Leeuwen <[email protected]>
Co-authored-by: Rico Pahlisch <[email protected]>
Signed-off-by: zirain <[email protected]>

* docs: rm alpha alert for gateway namespace mode (#6709)

Signed-off-by: Arko Dasgupta <[email protected]>
Signed-off-by: zirain <[email protected]>

* allow SNI and Cert SAN mismatch (#6719)

Fixes: #6442

Signed-off-by: Arko Dasgupta <[email protected]>
Signed-off-by: zirain <[email protected]>

* chore(charts): update metadata for gateway-crds-helm (#6725)

* chore(charts): update metadata for gateway-crds-helm

Signed-off-by: Maxime Brunet <[email protected]>
Signed-off-by: zirain <[email protected]>

* chore: Don't render bootstrap local cluster if topologyInjector is disabled (#6718)

* Consider topologyInjector when rendering bootstrap

Signed-off-by: jukie <[email protected]>

* Add logic to provider

Signed-off-by: jukie <[email protected]>
Signed-off-by: zirain <[email protected]>

* remove nit log when Backend API is disabled (#6708)

* remove nit log when Backend API is disabled

Signed-off-by: zirain <[email protected]>

* fix: EnvoyProxy image with digest is rejected (#6720)

* fix: EnvoyProxy image with digest is rejected

Signed-off-by: zirain <[email protected]>

* Revert "feat: add listener metadata (#6639)" (#6727)

This reverts commit 20cb68b.

Signed-off-by: Arko Dasgupta <[email protected]>
Signed-off-by: zirain <[email protected]>

* docs: enhance extensibility index page (#6728)

make it easier to pick the relevant extension type

Signed-off-by: Arko Dasgupta <[email protected]>
Signed-off-by: zirain <[email protected]>

* docs: add docs explaining graceful shutdown (#6729)

* docs: add docs explaining graceful shutdown

fixes: #2686

Signed-off-by: Arko Dasgupta <[email protected]>
Signed-off-by: zirain <[email protected]>

* docs: ClusterTrustBundle Support in BackendTLSPolicy (#6714)

Signed-off-by: zirain <[email protected]>

* chore: bump go 1.24.6 (#6732)

Signed-off-by: zirain <[email protected]>

* [release-1.5] release-notes for v1.5.0 (#6731)

* [release-1.5] release-notes for v1.5.0

Signed-off-by: zirain <[email protected]>

* update compatibility matrix

Signed-off-by: zirain <[email protected]>

---------

Signed-off-by: Arko Dasgupta <[email protected]>
Signed-off-by: zirain <[email protected]>
Signed-off-by: Pascal van Leeuwen <[email protected]>
Signed-off-by: Maxime Brunet <[email protected]>
Signed-off-by: jukie <[email protected]>
Co-authored-by: Arko Dasgupta <[email protected]>
Co-authored-by: commoddity <[email protected]>
Co-authored-by: Rico Pahlisch <[email protected]>
Co-authored-by: Maxime Brunet <[email protected]>
Co-authored-by: Isaac <[email protected]>
zirain added a commit to zirain/gateway that referenced this pull request Sep 16, 2025
@zirain @arkodg
@commoddity @rpahli @maxbrunet @jukie
[release-1.5] cherry pick for v1.5.0 (envoyproxy#6738)
b573ba4 
* docs: rm latest from install egctl docs (envoyproxy#6700)

* we've removed the latest egctl artifacts

Relates to envoyproxy#6551

Signed-off-by: Arko Dasgupta <[email protected]>
Signed-off-by: zirain <[email protected]>

* chore: fix globalResources in GNM (envoyproxy#6701)

Signed-off-by: zirain <[email protected]>

* move ordering gateway-api resources to provider (envoyproxy#6695)

Signed-off-by: zirain <[email protected]>

* Rate Limiter: Enable rate limit for month and year (envoyproxy#6715)

* update go control plane rate limiter version

Signed-off-by: Pascal van Leeuwen <[email protected]>

* enable rate limit for month and year

Signed-off-by: Pascal van Leeuwen <[email protected]>

* add attribution

Signed-off-by: Pascal van Leeuwen <[email protected]>

* fix gen

Signed-off-by: Pascal van Leeuwen <[email protected]>

* remove helm binaries

Signed-off-by: Pascal van Leeuwen <[email protected]>

---------

Signed-off-by: Pascal van Leeuwen <[email protected]>
Co-authored-by: Rico Pahlisch <[email protected]>
Signed-off-by: zirain <[email protected]>

* docs: rm alpha alert for gateway namespace mode (envoyproxy#6709)

Signed-off-by: Arko Dasgupta <[email protected]>
Signed-off-by: zirain <[email protected]>

* allow SNI and Cert SAN mismatch (envoyproxy#6719)

Fixes: envoyproxy#6442

Signed-off-by: Arko Dasgupta <[email protected]>
Signed-off-by: zirain <[email protected]>

* chore(charts): update metadata for gateway-crds-helm (envoyproxy#6725)

* chore(charts): update metadata for gateway-crds-helm

Signed-off-by: Maxime Brunet <[email protected]>
Signed-off-by: zirain <[email protected]>

* chore: Don't render bootstrap local cluster if topologyInjector is disabled (envoyproxy#6718)

* Consider topologyInjector when rendering bootstrap

Signed-off-by: jukie <[email protected]>

* Add logic to provider

Signed-off-by: jukie <[email protected]>
Signed-off-by: zirain <[email protected]>

* remove nit log when Backend API is disabled (envoyproxy#6708)

* remove nit log when Backend API is disabled

Signed-off-by: zirain <[email protected]>

* fix: EnvoyProxy image with digest is rejected (envoyproxy#6720)

* fix: EnvoyProxy image with digest is rejected

Signed-off-by: zirain <[email protected]>

* Revert "feat: add listener metadata (envoyproxy#6639)" (envoyproxy#6727)

This reverts commit 20cb68b.

Signed-off-by: Arko Dasgupta <[email protected]>
Signed-off-by: zirain <[email protected]>

* docs: enhance extensibility index page (envoyproxy#6728)

make it easier to pick the relevant extension type

Signed-off-by: Arko Dasgupta <[email protected]>
Signed-off-by: zirain <[email protected]>

* docs: add docs explaining graceful shutdown (envoyproxy#6729)

* docs: add docs explaining graceful shutdown

fixes: envoyproxy#2686

Signed-off-by: Arko Dasgupta <[email protected]>
Signed-off-by: zirain <[email protected]>

* docs: ClusterTrustBundle Support in BackendTLSPolicy (envoyproxy#6714)

Signed-off-by: zirain <[email protected]>

* chore: bump go 1.24.6 (envoyproxy#6732)

Signed-off-by: zirain <[email protected]>

* [release-1.5] release-notes for v1.5.0 (envoyproxy#6731)

* [release-1.5] release-notes for v1.5.0

Signed-off-by: zirain <[email protected]>

* update compatibility matrix

Signed-off-by: zirain <[email protected]>

---------

Signed-off-by: Arko Dasgupta <[email protected]>
Signed-off-by: zirain <[email protected]>
Signed-off-by: Pascal van Leeuwen <[email protected]>
Signed-off-by: Maxime Brunet <[email protected]>
Signed-off-by: jukie <[email protected]>
Co-authored-by: Arko Dasgupta <[email protected]>
Co-authored-by: commoddity <[email protected]>
Co-authored-by: Rico Pahlisch <[email protected]>
Co-authored-by: Maxime Brunet <[email protected]>
Co-authored-by: Isaac <[email protected]>
Signed-off-by: zirain <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@arkodg arkodg arkodg approved these changes

@guydc guydc guydc approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

Backlog

Development

Successfully merging this pull request may close these issues.

docs: ClusterTrustBundle Support in BackendTLSPolicy

3 participants

@zirain @arkodg @guydc