-
Notifications
You must be signed in to change notification settings - Fork 412
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: Add support for BackendTLSPolicy to target ServiceImport #5451
base: main
Are you sure you want to change the base?
feat: Add support for BackendTLSPolicy to target ServiceImport #5451
Conversation
Signed-off-by: Teju Nareddy <tejunareddy@gmail.com>
settings: | ||
- name: httproute/envoy-gateway/httproute-btls/rule/0/backend/0 | ||
protocol: HTTP | ||
tls: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is the key section we are looking for. Previous test run was missing tls
without the code changes in this PR.
Codecov ReportAttention: Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## main #5451 +/- ##
==========================================
+ Coverage 65.30% 65.33% +0.02%
==========================================
Files 213 213
Lines 33915 33915
==========================================
+ Hits 22147 22157 +10
+ Misses 10438 10432 -6
+ Partials 1330 1326 -4 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM thanks !
// TODO(tnareddy): Should these protocols be supported for ServiceImport? | ||
// Follow-up in separate issue and PR. | ||
// | ||
// if servicePort.AppProtocol != nil { | ||
// protocol = serviceAppProtocolToIRAppProtocol(*servicePort.AppProtocol) | ||
// } |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
need create an issue for this.
all tests are failing, is this a flake or a real issue ? |
Problem
BackendTLSPolicy only supports Service and Backend targetRefs, it doesn't support ServiceImport.
Fix
This PR adds support for that case.
Testing Done
Added a new translator test case that verifies
tls
settings appear in the xDS IR for ServiceImports.Additional Info
Fixes #5376
Release Notes: Yes