Skip to content

Revert "api: add sourceCIDRs field in SecurityPolicy for L4 IP filtering"#8471

Merged
zhaohuabing merged 1 commit intoenvoyproxy:mainfrom
zhaohuabing:revert-8009
Mar 11, 2026
Merged

Revert "api: add sourceCIDRs field in SecurityPolicy for L4 IP filtering"#8471
zhaohuabing merged 1 commit intoenvoyproxy:mainfrom
zhaohuabing:revert-8009

Conversation

@zhaohuabing
Copy link
Copy Markdown
Member

@zhaohuabing zhaohuabing commented Mar 10, 2026

Revert "api: add sourceCIDRs field in SecurityPolicy for L4 IP filtering" (#8009)

This reverts commit a97d57a.

Release Notes: No - the SourceCIDRs was marked as notImplementedHide, so no user-visible change.

Why this API should be reverted: the issue with putting this in SP instead of CTP is that SP can be applied per-route. That makes L4 IP filtering tricky, since different routes could end up with SecurityPolicies with/without/different SourceCIDRs.

Background:
#7825 (comment)
#7825 (comment)

…ing (envoyproxy#8009)"

This reverts commit a97d57a.

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
@zhaohuabing zhaohuabing requested a review from a team as a code owner March 10, 2026 04:56
@netlify
Copy link
Copy Markdown

netlify bot commented Mar 10, 2026

Deploy Preview for cerulean-figolla-1f9435 canceled.

Name Link
🔨 Latest commit 4a32ce2
🔍 Latest deploy log https://app.netlify.com/projects/cerulean-figolla-1f9435/deploys/69afa4758a30d1000899572d
@zhaohuabing zhaohuabing changed the title Revert "api: add sourceCIDRs field in SecurityPolicy for L4 IP filter… Mar 10, 2026
@codecov
Copy link
Copy Markdown

codecov bot commented Mar 10, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.13%. Comparing base (a470576) to head (4a32ce2).
⚠️ Report is 3 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #8471   +/-   ##
=======================================
  Coverage   74.13%   74.13%           
=======================================
  Files         242      242           
  Lines       37579    37579           
=======================================
+ Hits        27859    27860    +1     
  Misses       7778     7778           
+ Partials     1942     1941    -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.
@zhaohuabing zhaohuabing merged commit 7c16b05 into envoyproxy:main Mar 11, 2026
57 of 59 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

3 participants