feat: envoy extension policy listenerset attach by kkk777-7 · Pull Request #9425 · envoyproxy/gateway

kkk777-7 · 2026-07-06T15:23:40Z

What this PR does / why we need it:

follow-up #9270

Support policy attachment for ListenerSet.

This PR includes:

Policy attachment to ListenerSet and ListenerSet sections
Route policy attachment when a route has a ListenerSet parent

Which issue(s) this PR fixes:

Fixes #8092

Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>

netlify · 2026-07-06T15:23:46Z

✅ Deploy Preview for cerulean-figolla-1f9435 ready!

Name	Link
🔨 Latest commit	`6b0eafb`
🔍 Latest deploy log	https://app.netlify.com/projects/cerulean-figolla-1f9435/deploys/6a66fa70d44f0b000854ea00
😎 Deploy Preview	https://deploy-preview-9425--cerulean-figolla-1f9435.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 58c9a0d6c2

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

codecov · 2026-07-06T15:42:43Z

Codecov Report

❌ Patch coverage is 87.21461% with 28 lines in your changes missing coverage. Please review.
✅ Project coverage is 75.68%. Comparing base (b1e2025) to head (6b0eafb).

Files with missing lines	Patch %	Lines
internal/gatewayapi/envoyextensionpolicy.go	85.34%	18 Missing and 10 partials ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #9425      +/-   ##
==========================================
+ Coverage   75.65%   75.68%   +0.02%     
==========================================
  Files         253      253              
  Lines       41879    42015     +136     
==========================================
+ Hits        31684    31798     +114     
- Misses       8064     8080      +16     
- Partials     2131     2137       +6

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>

kkk777-7 · 2026-07-07T00:21:34Z

@codex review

chatgpt-codex-connector · 2026-07-07T00:28:29Z

Codex Review: Didn't find any major issues. Breezy!

Reviewed commit: edc5df9311

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

zirain · 2026-07-07T00:34:56Z

one naive question: the EEP should located in the same namespace with ListenerSet, is that right?

zhaohuabing · 2026-07-07T14:42:55Z

one naive question: the EEP should located in the same namespace with ListenerSet, is that right?

@zirain cross-namespace policy attachment has already been supported in #8676.

zirain · 2026-07-07T22:43:16Z

one naive question: the EEP should located in the same namespace with ListenerSet, is that right?

@zirain cross-namespace policy attachment has already been supported in #8676.

cc @guydc

zhaohuabing

LGTM. Thanks!

arkodg · 2026-07-26T16:45:22Z

hey any way we can perform additional translation only if len(listenerSets) > 0 ?

Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>

kkk777-7 · 2026-07-27T05:50:48Z

hey any way we can perform additional translation only if len(listenerSets) > 0 ?

Hi, I've updated by 4a06573.

If looks good, I'll apply other policies in follow-up PR.

Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>

kkk777-7 · 2026-07-27T15:36:34Z

/retest

* feat: envoy extension policy listenerset attach Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com> * add release note Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com> * fix lint Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com> * perf: skip ls translation Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com> * update latest code Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com> --------- Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>

feat: envoy extension policy listenerset attach

58c9a0d

Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>

kkk777-7 requested a review from a team as a code owner July 6, 2026 15:23

add release note

d549f0e

Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>

kkk777-7 added this to the v1.9.0-rc.1 Release milestone Jul 6, 2026

chatgpt-codex-connector Bot reviewed Jul 6, 2026

View reviewed changes

Comment thread api/v1alpha1/envoyextensionypolicy_types.go

fix lint

edc5df9

Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>

EmileGoto mentioned this pull request Jul 8, 2026

HTTPRoute/SecurityPolicy/ListenerSet - StategicMerge setup does not resolve to parent policy #9409

Open

kkk777-7 mentioned this pull request Jul 13, 2026

feat: support listenerset reference grant #9481

Merged

11 tasks

zhaohuabing previously approved these changes Jul 25, 2026

View reviewed changes

zhaohuabing requested a review from a team July 25, 2026 09:10

perf: skip ls translation

4a06573

Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>

kkk777-7 dismissed zhaohuabing’s stale review via 4a06573 July 27, 2026 05:46

kkk777-7 added 2 commits July 27, 2026 15:12

Merge branch 'main' into feat-eep-ls-attach

350db7e

Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>

update latest code

6b0eafb

Signed-off-by: kkk777-7 <kota.kimura0725@gmail.com>

zhaohuabing approved these changes Jul 29, 2026

View reviewed changes

zirain approved these changes Jul 29, 2026

View reviewed changes

kkk777-7 merged commit 511b1e8 into envoyproxy:main Jul 29, 2026
181 of 202 checks passed

kkk777-7 mentioned this pull request Jul 29, 2026

follow-up of listenerset policy attachment #9607

Closed

kkk777-7 mentioned this pull request Jul 30, 2026

follow up listenerset policy attachment #9621

Merged

11 tasks

muwaqar-cflt mentioned this pull request Jul 30, 2026

fix(gatewayapi): don't skip MergeBackends precedence-index claims for policies that set nothing #9590

Open

11 tasks

Uh oh!

Conversation

kkk777-7 commented Jul 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

netlify Bot commented Jul 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for cerulean-figolla-1f9435 ready!

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

Uh oh!

codecov Bot commented Jul 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

kkk777-7 commented Jul 7, 2026

Uh oh!

chatgpt-codex-connector Bot commented Jul 7, 2026

Uh oh!

zirain commented Jul 7, 2026

Uh oh!

zhaohuabing commented Jul 7, 2026

Uh oh!

zirain commented Jul 7, 2026

Uh oh!

zhaohuabing left a comment

Choose a reason for hiding this comment

Uh oh!

arkodg commented Jul 26, 2026

Uh oh!

kkk777-7 commented Jul 27, 2026

Uh oh!

kkk777-7 commented Jul 27, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

kkk777-7 commented Jul 6, 2026 •

edited

Loading

netlify Bot commented Jul 6, 2026 •

edited

Loading

codecov Bot commented Jul 6, 2026 •

edited

Loading