Skip to content

chore: bump Envoy Gateway v1.4.3 -> v1.7.3 - #29

Closed
scotwells wants to merge 1 commit into
mainfrom
chore/bump-envoy-gateway-v1.7.3
Closed

chore: bump Envoy Gateway v1.4.3 -> v1.7.3#29
scotwells wants to merge 1 commit into
mainfrom
chore/bump-envoy-gateway-v1.7.3

Conversation

@scotwells

Copy link
Copy Markdown
Contributor

Summary

Bumps the Envoy Gateway control plane from v1.4.3 → v1.7.3 by updating the OCIRepository tag in components/envoy-gateway-operator/oci-repository.yaml. The HelmRelease pulls chart + appVersion via chartRef, so the OCI tag is the only pin that needs to change.

Why

network-services-operator (NSO) programs downstream Gateways and EnvoyPatchPolicy resources whose xDS resource names (e.g. http-80, <ns>/<gw>/<listener> route configs, httproute/<ns>/<name>/rule/<idx> clusters) must match the Envoy Gateway version running in prod. We are standing up a controlled xDS-build-cost experiment on top of test-infra and need the control plane to be v1.7.3 to keep fidelity with production.

Validation

kustomize build components/envoy-gateway-operator
kustomize build components/envoy-gateway-operator/gateway-resources

Both render cleanly. The gateway-resources EnvoyProxy/GatewayClass use only fields stable across 1.4 → 1.7 (mergeGateways, provider.kubernetes.envoyService/envoyDeployment, telemetry.metrics.prometheus); no CRD field removals affect these manifests. Full apply-time validation against live v1.7.3 CRDs is exercised by the consuming experiment (network-services-operator/experiments/xds-scaling).

Risk

Low. Single tag change; flux reconciles the HelmRelease and rolls the envoy-gateway deployment. Rollback is reverting the tag.

🤖 Generated with Claude Code

Bump the Envoy Gateway control plane OCIRepository tag from v1.4.3 to
v1.7.3 (chart and appVersion track the OCI tag via chartRef, so no other
pin needs changing).

Validated locally:
  kustomize build components/envoy-gateway-operator
  kustomize build components/envoy-gateway-operator/gateway-resources
Both render cleanly; the gateway-resources EnvoyProxy/GatewayClass use
only fields stable across 1.4 -> 1.7 (mergeGateways, provider.kubernetes,
telemetry.metrics.prometheus). No CRD field removals affect these
manifests.

Motivation: align the test-infra control plane with the Envoy Gateway
version targeted by network-services-operator so downstream Gateway/EPP
fidelity experiments run against the production version.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@scotwells

Copy link
Copy Markdown
Contributor Author

Superseded by #33

@scotwells scotwells closed this Jul 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant