Skip to content

feat: support targetRef in backend security policy #762

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 13 commits into from
Jul 26, 2025

Conversation

Xunzhuo
Copy link
Member

@Xunzhuo Xunzhuo commented Jun 24, 2025

Description

This commit adds a new targetRefs field to BackendSecurityPolicy to match the recommended pattern of GWAPI. This means that we will deprecate backendSecurityPolicyRef of AIServiceBackend. It will continue working as-is, but the API will be dropped after v0.3 is released. Users are advised to migrate to the new API with the instruction in the documentation.

Related Issues/PRs (if applicable)

Fixes: #549

@Xunzhuo Xunzhuo requested a review from a team as a code owner June 24, 2025 08:25
@Xunzhuo Xunzhuo force-pushed the feat-use-targetref branch from d224f4e to f59d331 Compare June 24, 2025 08:33
@Xunzhuo Xunzhuo force-pushed the feat-use-targetref branch from f59d331 to 126cc7b Compare June 24, 2025 08:39
@mathetake
Copy link
Member

thank for the work here... but i think this involves the API refactoring discussion we have in like #675 , so let's wait for it to reach the consensus cc @missBerg

@Xunzhuo
Copy link
Member Author

Xunzhuo commented Jun 26, 2025

Yes, I did this earlier than the discussion, so let us hold.

@mathetake mathetake added this to the v0.3.0 milestone Jul 2, 2025
@mathetake mathetake self-assigned this Jul 18, 2025
@mathetake
Copy link
Member

i will take over this pr

mathetake added 10 commits July 25, 2025 14:54
# Conflicts:
#	api/v1alpha1/api.go
#	internal/controller/ai_service_backend.go
#	internal/controller/backend_security_policy_test.go
#	tests/controller/controller_test.go
Signed-off-by: Takeshi Yoneda <[email protected]>
Signed-off-by: Takeshi Yoneda <[email protected]>
Signed-off-by: Takeshi Yoneda <[email protected]>
Signed-off-by: Takeshi Yoneda <[email protected]>
Signed-off-by: Takeshi Yoneda <[email protected]>
Signed-off-by: Takeshi Yoneda <[email protected]>
Signed-off-by: Takeshi Yoneda <[email protected]>
Signed-off-by: Takeshi Yoneda <[email protected]>
Signed-off-by: Takeshi Yoneda <[email protected]>
@mathetake
Copy link
Member

i pushed some changes. PTAL @Xunzhuo

@Xunzhuo
Copy link
Member Author

Xunzhuo commented Jul 26, 2025

thanks @mathetake!

@mathetake mathetake merged commit 7318be6 into envoyproxy:main Jul 26, 2025
23 checks passed
mathetake added a commit that referenced this pull request Jul 30, 2025
**Description**

backendSecurityPolicyRef has been marked deprecated, so this cleans up
the remaining reference of backendSecurityPolicyRef in various places.

**Related Issues/PRs (if applicable)**

Follow up on #762

Signed-off-by: Takeshi Yoneda <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

BackendSecurityPolicy should target AIServiceBackend
2 participants