Make naming less envoy specific

Signed-off-by: kabbohus <hussein.kabbout@united-security-providers.ch>

Author: kabbohus

api/v1alpha1/timeout_types.go

@@ -72,13 +72,13 @@ type ClientTimeout struct {
 	// +optional
 	HTTP *HTTPClientTimeout `json:"http,omitempty"`
 
-	// ListenerFiltersTimeout is the duration envoy waits for all listener filters to complete operation.
-	// If the timeout is reached, the accepted socket is closed without a connection being created.
-	// Specify 0 to disable the timeout.
+	// ConnectionInspectionTimeout is the maximum time to wait for initial inspection
+	// (TLS / SNI and protocol detection, or HTTP protocol parsing) of an incoming connection.
+	// If exceeded, the connection is dropped.
 	// Default: 15 seconds.
 	//
 	// +optional
-	ListenerFiltersTimeout  *gwapiv1.Duration `json:"listenerFiltersTimeout,omitempty"`
+	ConnectionInspectionTimeout  *gwapiv1.Duration `json:"connectionInspectionTimeout,omitempty"`
 }
 
 // TCPClientTimeout only provides timeout configuration on the listener whose protocol is TCP or TLS.
@@ -90,12 +90,13 @@ type TCPClientTimeout struct {
 	// +optional
 	IdleTimeout *gwapiv1.Duration `json:"idleTimeout,omitempty"`
 
-	// TransportSocketConnectTimeout is the duration envoy waits for incoming connections to complete any transport socket negotiations.
+	// HandshakeTimeout for a TCP connection. The maximum time to complete transport level connection negotiation
+	// (e.g. the TLS handshake) after a connection is accepted.
 	// If this expires before the transport reports connection establishment, the connection is summarily closed.
 	// Default: 5 seconds.
 	//
 	// +optional
-	TransportSocketConnectTimeout  *gwapiv1.Duration `json:"transportSocketConnectTimeout,omitempty"`
+	HandshakeTimeout  *gwapiv1.Duration `json:"handshakeTimeout,omitempty"`
 }
 
 type HTTPClientTimeout struct {
@@ -105,6 +106,15 @@ type HTTPClientTimeout struct {
 	// +optional
 	RequestReceivedTimeout *gwapiv1.Duration `json:"requestReceivedTimeout,omitempty"`
 
+	// RequestHeadersReceivedTimeout is the duration envoy waits for the request headers to arrive.
+	// The timer is activated when the first byte of the headers is received,
+	// and is disarmed when the last byte of the headers has been received.
+	// Specify 0 to disable the timeout.
+	// Default: 10 seconds.
+	//
+	// +optional
+	RequestHeadersReceivedTimeout *gwapiv1.Duration `json:"requestHeadersReceivedTimeout,omitempty"`
+
 	// IdleTimeout for an HTTP connection. Idle time is defined as a period in which there are no active requests in the connection.
 	// Default: 1 hour.
 	//
@@ -116,13 +126,4 @@ type HTTPClientTimeout struct {
 	//
 	// +optional
 	StreamIdleTimeout *gwapiv1.Duration `json:"streamIdleTimeout,omitempty"`
-
-	// RequestHeadersTimeout is the duration envoy waits for the request headers to arrive.
-	// The timer is activated when the first byte of the headers is received,
-	// and is disarmed when the last byte of the headers has been received.
-	// Specify 0 to disable the timeout.
-	// Default: 10 seconds.
-	//
-	// +optional
-	RequestHeadersTimeout *gwapiv1.Duration `json:"requestHeadersTimeout,omitempty"`
 }

api/v1alpha1/zz_generated.deepcopy.go

@@ -1327,6 +1327,14 @@ spec:
               timeout:
                 description: Timeout settings for the client connections.
                 properties:
+                  connectionInspectionTimeout:
+                    description: |-
+                      ConnectionInspectionTimeout is the maximum time to wait for initial inspection
+                      (TLS / SNI and protocol detection, or HTTP protocol parsing) of an incoming connection.
+                      If exceeded, the connection is dropped.
+                      Default: 15 seconds.
+                    pattern: ^([0-9]{1,5}(h|m|s|ms)){1,4}$
+                    type: string
                   http:
                     description: Timeout settings for HTTP.
                     properties:
@@ -1336,9 +1344,9 @@ spec:
                           Default: 1 hour.
                         pattern: ^([0-9]{1,5}(h|m|s|ms)){1,4}$
                         type: string
-                      requestHeadersTimeout:
+                      requestHeadersReceivedTimeout:
                         description: |-
-                          RequestHeadersTimeout is the duration envoy waits for the request headers to arrive.
+                          RequestHeadersReceivedTimeout is the duration envoy waits for the request headers to arrive.
                           The timer is activated when the first byte of the headers is received,
                           and is disarmed when the last byte of the headers has been received.
                           Specify 0 to disable the timeout.
@@ -1358,31 +1366,24 @@ spec:
                         pattern: ^([0-9]{1,5}(h|m|s|ms)){1,4}$
                         type: string
                     type: object
-                  listenerFiltersTimeout:
-                    description: |-
-                      ListenerFiltersTimeout is the duration envoy waits for all listener filters to complete operation.
-                      If the timeout is reached, the accepted socket is closed without a connection being created.
-                      Specify 0 to disable the timeout.
-                      Default: 15 seconds.
-                    pattern: ^([0-9]{1,5}(h|m|s|ms)){1,4}$
-                    type: string
                   tcp:
                     description: Timeout settings for TCP.
                     properties:
+                      handshakeTimeout:
+                        description: |-
+                          HandshakeTimeout for a TCP connection. The maximum time to complete transport level connection negotiation
+                          (e.g. the TLS handshake) after a connection is accepted.
+                          If this expires before the transport reports connection establishment, the connection is summarily closed.
+                          Default: 5 seconds.
+                        pattern: ^([0-9]{1,5}(h|m|s|ms)){1,4}$
+                        type: string
                       idleTimeout:
                         description: |-
                           IdleTimeout for a TCP connection. Idle time is defined as a period in which there are no
                           bytes sent or received on either the upstream or downstream connection.
                           Default: 1 hour.
                         pattern: ^([0-9]{1,5}(h|m|s|ms)){1,4}$
                         type: string
-                      transportSocketConnectTimeout:
-                        description: |-
-                          TransportSocketConnectTimeout is the duration envoy waits for incoming connections to complete any transport socket negotiations.
-                          If this expires before the transport reports connection establishment, the connection is summarily closed.
-                          Default: 5 seconds.
-                        pattern: ^([0-9]{1,5}(h|m|s|ms)){1,4}$
-                        type: string
                     type: object
                 type: object
               tls:

charts/gateway-crds-helm/templates/generated/gateway.envoyproxy.io_clienttrafficpolicies.yaml

@@ -1326,6 +1326,14 @@ spec:
               timeout:
                 description: Timeout settings for the client connections.
                 properties:
+                  connectionInspectionTimeout:
+                    description: |-
+                      ConnectionInspectionTimeout is the maximum time to wait for initial inspection
+                      (TLS / SNI and protocol detection, or HTTP protocol parsing) of an incoming connection.
+                      If exceeded, the connection is dropped.
+                      Default: 15 seconds.
+                    pattern: ^([0-9]{1,5}(h|m|s|ms)){1,4}$
+                    type: string
                   http:
                     description: Timeout settings for HTTP.
                     properties:
@@ -1335,9 +1343,9 @@ spec:
                           Default: 1 hour.
                         pattern: ^([0-9]{1,5}(h|m|s|ms)){1,4}$
                         type: string
-                      requestHeadersTimeout:
+                      requestHeadersReceivedTimeout:
                         description: |-
-                          RequestHeadersTimeout is the duration envoy waits for the request headers to arrive.
+                          RequestHeadersReceivedTimeout is the duration envoy waits for the request headers to arrive.
                           The timer is activated when the first byte of the headers is received,
                           and is disarmed when the last byte of the headers has been received.
                           Specify 0 to disable the timeout.
@@ -1357,31 +1365,24 @@ spec:
                         pattern: ^([0-9]{1,5}(h|m|s|ms)){1,4}$
                         type: string
                     type: object
-                  listenerFiltersTimeout:
-                    description: |-
-                      ListenerFiltersTimeout is the duration envoy waits for all listener filters to complete operation.
-                      If the timeout is reached, the accepted socket is closed without a connection being created.
-                      Specify 0 to disable the timeout.
-                      Default: 15 seconds.
-                    pattern: ^([0-9]{1,5}(h|m|s|ms)){1,4}$
-                    type: string
                   tcp:
                     description: Timeout settings for TCP.
                     properties:
+                      handshakeTimeout:
+                        description: |-
+                          HandshakeTimeout for a TCP connection. The maximum time to complete transport level connection negotiation
+                          (e.g. the TLS handshake) after a connection is accepted.
+                          If this expires before the transport reports connection establishment, the connection is summarily closed.
+                          Default: 5 seconds.
+                        pattern: ^([0-9]{1,5}(h|m|s|ms)){1,4}$
+                        type: string
                       idleTimeout:
                         description: |-
                           IdleTimeout for a TCP connection. Idle time is defined as a period in which there are no
                           bytes sent or received on either the upstream or downstream connection.
                           Default: 1 hour.
                         pattern: ^([0-9]{1,5}(h|m|s|ms)){1,4}$
                         type: string
-                      transportSocketConnectTimeout:
-                        description: |-
-                          TransportSocketConnectTimeout is the duration envoy waits for incoming connections to complete any transport socket negotiations.
-                          If this expires before the transport reports connection establishment, the connection is summarily closed.
-                          Default: 5 seconds.
-                        pattern: ^([0-9]{1,5}(h|m|s|ms)){1,4}$
-                        type: string
                     type: object
                 type: object
               tls:

charts/gateway-helm/charts/crds/crds/generated/gateway.envoyproxy.io_clienttrafficpolicies.yaml

@@ -47,10 +47,16 @@
 - circuitBreakers:
     thresholds:
     - maxRetries: 1024
+  clusterType:
+    name: envoy.cluster.dns
+    typedConfig:
+      '@type': type.googleapis.com/envoy.extensions.clusters.dns.v3.DnsCluster
+      dnsLookupFamily: V4_PREFERRED
+      dnsRefreshRate: 30s
+      respectDnsTtl: true
   commonLbConfig: {}
   connectTimeout: 10s
   dnsLookupFamily: V4_PREFERRED
-  dnsRefreshRate: 30s
   ignoreHealthOnHostRemoval: true
   loadAssignment:
     clusterName: localhost_443
@@ -75,7 +81,6 @@
             localityWeightedLbConfig: {}
   name: localhost_443
   perConnectionBufferLimitBytes: 32768
-  respectDnsTtl: true
   transportSocket:
     name: envoy.transport_sockets.tls
     typedConfig:
@@ -85,4 +90,3 @@
           trustedCa:
             filename: /etc/ssl/certs/ca-certificates.crt
       sni: localhost
-  type: STRICT_DNS

internal/xds/translator/testdata/out/xds-ir/jwt-allow-missing-or-failed.clusters.yaml

@@ -961,7 +961,7 @@ _Appears in:_
 | ---   | ---  | ---      | ---     | ---         |
 | `tcp` | _[TCPClientTimeout](#tcpclienttimeout)_ |  false  |  | Timeout settings for TCP. |
 | `http` | _[HTTPClientTimeout](#httpclienttimeout)_ |  false  |  | Timeout settings for HTTP. |
-| `listenerFiltersTimeout` | _[Duration](https://gateway-api.sigs.k8s.io/reference/api-spec/1.5/spec/#duration)_ |  false  |  | ListenerFiltersTimeout is the duration envoy waits for all listener filters to complete operation.<br />If the timeout is reached, the accepted socket is closed without a connection being created.<br />Specify 0 to disable the timeout.<br />Default: 15 seconds. |
+| `connectionInspectionTimeout` | _[Duration](https://gateway-api.sigs.k8s.io/reference/api-spec/1.5/spec/#duration)_ |  false  |  | ConnectionInspectionTimeout is the maximum time to wait for initial inspection<br />(TLS / SNI and protocol detection, or HTTP protocol parsing) of an incoming connection.<br />If exceeded, the connection is dropped.<br />Default: 15 seconds. |
 
 
 #### ClientTrafficPolicy
@@ -2997,9 +2997,9 @@ _Appears in:_
 | Field | Type | Required | Default | Description |
 | ---   | ---  | ---      | ---     | ---         |
 | `requestReceivedTimeout` | _[Duration](https://gateway-api.sigs.k8s.io/reference/api-spec/1.5/spec/#duration)_ |  false  |  | RequestReceivedTimeout is the duration envoy waits for the complete request reception. This timer starts upon request<br />initiation and stops when either the last byte of the request is sent upstream or when the response begins. |
+| `requestHeadersReceivedTimeout` | _[Duration](https://gateway-api.sigs.k8s.io/reference/api-spec/1.5/spec/#duration)_ |  false  |  | RequestHeadersReceivedTimeout is the duration envoy waits for the request headers to arrive.<br />The timer is activated when the first byte of the headers is received,<br />and is disarmed when the last byte of the headers has been received.<br />Specify 0 to disable the timeout.<br />Default: 10 seconds. |
 | `idleTimeout` | _[Duration](https://gateway-api.sigs.k8s.io/reference/api-spec/1.5/spec/#duration)_ |  false  |  | IdleTimeout for an HTTP connection. Idle time is defined as a period in which there are no active requests in the connection.<br />Default: 1 hour. |
 | `streamIdleTimeout` | _[Duration](https://gateway-api.sigs.k8s.io/reference/api-spec/1.5/spec/#duration)_ |  false  |  |  The stream idle timeout defines the amount of time a stream can exist without any upstream or downstream activity.<br /> Default: 5 minutes. |
-| `requestHeadersTimeout` | _[Duration](https://gateway-api.sigs.k8s.io/reference/api-spec/1.5/spec/#duration)_ |  false  |  | RequestHeadersTimeout is the duration envoy waits for the request headers to arrive.<br />The timer is activated when the first byte of the headers is received,<br />and is disarmed when the last byte of the headers has been received.<br />Specify 0 to disable the timeout.<br />Default: 10 seconds. |
 
 
 #### HTTPCookieMatch
@@ -6164,7 +6164,7 @@ _Appears in:_
 | Field | Type | Required | Default | Description |
 | ---   | ---  | ---      | ---     | ---         |
 | `idleTimeout` | _[Duration](https://gateway-api.sigs.k8s.io/reference/api-spec/1.5/spec/#duration)_ |  false  |  | IdleTimeout for a TCP connection. Idle time is defined as a period in which there are no<br />bytes sent or received on either the upstream or downstream connection.<br />Default: 1 hour. |
-| `transportSocketConnectTimeout` | _[Duration](https://gateway-api.sigs.k8s.io/reference/api-spec/1.5/spec/#duration)_ |  false  |  | TransportSocketConnectTimeout is the duration envoy waits for incoming connections to complete any transport socket negotiations.<br />If this expires before the transport reports connection establishment, the connection is summarily closed.<br />Default: 5 seconds. |
+| `handshakeTimeout` | _[Duration](https://gateway-api.sigs.k8s.io/reference/api-spec/1.5/spec/#duration)_ |  false  |  | HandshakeTimeout for a TCP connection. The maximum time to complete transport level connection negotiation<br />(e.g. the TLS handshake) after a connection is accepted.<br />If this expires before the transport reports connection establishment, the connection is summarily closed.<br />Default: 5 seconds. |
 
 
 #### TCPKeepalive