Repository navigation

Issues

New issue

WARNING: plan removal of fields deprecated for more than a year in v1.11
#10211 · zirain opened on Oct 8, 2026

Support negative response cost in global rate limits (per-client concurrency limits)
envoyproxy/gateway#10338 · opened on Oct 20, 2026
1
Extension Server: VHost extension resources
envoyproxy/gateway#10336 · opened on Oct 20, 2026
Status updates remove status conditions and entries written by other controllers
envoyproxy/gateway#10335 · opened on Oct 20, 2026 · v1.10.0-rc.1 Release
2
Route policy ancestors drop the parentRef's port, so parentRefs that differ only by port share one ancestor
envoyproxy/gateway#10333 · opened on Oct 20, 2026
1
OIDC: Support authentication via JWT client_assertion from projected Kubernetes service account token
envoyproxy/gateway#10332 · opened on Oct 19, 2026
OIDC PAR Support
envoyproxy/gateway#10331 · opened on Oct 19, 2026
Add Extension Server attributes to EG traces
envoyproxy/gateway#10329 · opened on Oct 19, 2026
1
Merged route policies report their status on per-listener ancestors, so Accepted=False and Accepted=True show up together
envoyproxy/gateway#10314 · opened on Oct 17, 2026 · v1.10.0-rc.1 Release
1
Support setting the JWT clock_skew_seconds tolerance from SecurityPolicy
envoyproxy/gateway#10311 · opened on Oct 16, 2026
OIDC: let the nonce and code-verifier cookies use Path=/ so all OAuth2 cookies can carry the __Host- prefix
envoyproxy/gateway#10310 · opened on Oct 16, 2026
API: cleanup HTTP1 across CTP, BTP
envoyproxy/gateway#10308 · opened on Oct 16, 2026
MergeBackends: hasClusterSettings may consider the xRoute type to allow further de-duping
envoyproxy/gateway#10307 · opened on Oct 16, 2026
perf: reduce linear scans
envoyproxy/gateway#10306 · opened on Oct 16, 2026
Support connection duration jitter in ClientTrafficPolicy
envoyproxy/gateway#10299 · opened on Oct 16, 2026 · v1.10.0-rc.1 Release
Move the alternate protocols cache filter to the upstream filter chain once Envoy supports it
envoyproxy/gateway#10298 · opened on Oct 16, 2026
Allow insecureSkipVerify with upstream HTTP/3 once Envoy honors ACCEPT_UNTRUSTED on QUIC
envoyproxy/gateway#10297 · opened on Oct 16, 2026
Use the alternate protocols cache filter's own alt-svc strip once Envoy supports it
envoyproxy/gateway#10296 · opened on Oct 16, 2026
HTTPRoute status.parents empty or stale on first create under parallel applies (EG v1.9.2, GKE, hostless HTTPS listener)
envoyproxy/gateway#10294 · opened on Oct 16, 2026
JWT: editing a SecurityPolicy returns 403 "Wrong requirement_name" on existing connections since v1.9.0
envoyproxy/gateway#10288 · opened on Oct 15, 2026
1
Namespace watch mode: duplicate cache ByObject entries make the controller's cache scope random on each start
envoyproxy/gateway#10271 · opened on Oct 14, 2026
1
Mixed Service + custom backendRefs in one HTTPRoute rule lose traffic, and the outcome flips depending on MergeBackends
envoyproxy/gateway#10269 · opened on Oct 14, 2026
3
Support the new envoy 1.40 body size limit filter
envoyproxy/gateway#10268 · opened on Oct 14, 2026
Transient API error at startup leaves the Wasm cache uninitialized until the controller restarts ("wasm cache is not initialized")
envoyproxy/gateway#10267 · opened on Oct 14, 2026
2
Envoy's heap overload actions are off for the default proxy, because it has no memory limit
envoyproxy/gateway#10263 · opened on Oct 13, 2026
BackendTrafficPolicy responseOverride: forward original request and route context on redirect
envoyproxy/gateway#10262 · opened on Oct 13, 2026

Navigation Menu

Repository navigation

Issues

Issues

Support negative response cost in global rate limits (per-client concurrency limits)

Extension Server: VHost extension resources

Status updates remove status conditions and entries written by other controllers

Route policy ancestors drop the parentRef's port, so parentRefs that differ only by port share one ancestor

OIDC: Support authentication via JWT client_assertion from projected Kubernetes service account token

OIDC PAR Support

Add Extension Server attributes to EG traces

Merged route policies report their status on per-listener ancestors, so Accepted=False and Accepted=True show up together

Support setting the JWT clock_skew_seconds tolerance from SecurityPolicy

OIDC: let the nonce and code-verifier cookies use Path=/ so all OAuth2 cookies can carry the __Host- prefix

API: cleanup HTTP1 across CTP, BTP

MergeBackends: `hasClusterSettings` may consider the xRoute type to allow further de-duping

perf: reduce linear scans

Support connection duration jitter in ClientTrafficPolicy

Move the alternate protocols cache filter to the upstream filter chain once Envoy supports it

Allow insecureSkipVerify with upstream HTTP/3 once Envoy honors ACCEPT_UNTRUSTED on QUIC

Use the alternate protocols cache filter's own alt-svc strip once Envoy supports it

HTTPRoute status.parents empty or stale on first create under parallel applies (EG v1.9.2, GKE, hostless HTTPS listener)

JWT: editing a SecurityPolicy returns 403 "Wrong requirement_name" on existing connections since v1.9.0

Namespace watch mode: duplicate cache ByObject entries make the controller's cache scope random on each start

Mixed Service + custom backendRefs in one HTTPRoute rule lose traffic, and the outcome flips depending on MergeBackends

Support the new envoy 1.40 body size limit filter

Transient API error at startup leaves the Wasm cache uninitialized until the controller restarts ("wasm cache is not initialized")

Envoy's heap overload actions are off for the default proxy, because it has no memory limit

BackendTrafficPolicy responseOverride: forward original request and route context on redirect