Aleksei Sviridkin 5b92ca3fc8 fix(cilium): serve HTTPS and passthrough on one port from one listener ...

When a Gateway needs per-port Envoy listeners, the operator emits one
listener per HTTPS port and, with two or more passthrough ports, one per
passthrough port, all named listener-<port>. A port carrying both gets
two listeners with one name, and the agent skips the whole
CiliumEnvoyConfig, so every listener of the Gateway stops serving while
its status stays green. With one passthrough port the port is instead
mapped to two listeners in the CEC services. A tenant Gateway with
HTTPS and passthrough on 443 plus a passthrough listener on a native
port reaches the first case.

The patch puts the passthrough filter chains of such a port on its
HTTPS listener and leaves the port out of the passthrough listeners and
service mappings.

Assisted-by: LLM
Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-10-09 17:53:14 +03:00

..

apps

fix(postgres): cap the default shared_buffers at a quarter of the memory limit (#4724)

2026-10-09 00:10:40 +03:00

core

fix(cilium)!: take cilium's own addresses from a block kube-ovn does not hand out (#4778)

2026-10-08 21:41:23 +03:00

extra

fix(monitoring): count a central request as the receiver admitted it

2026-10-06 09:39:04 +03:00

library

fix(cozy-lib): round the sanitized CPU request up to a whole milli-CPU

2026-09-29 17:04:00 +02:00

system

fix(cilium): serve HTTPS and passthrough on one port from one listener

2026-10-09 17:53:14 +03:00

tests/cozy-lib-tests

fix(cozy-lib): round the sanitized CPU request up to a whole milli-CPU

2026-09-29 17:04:00 +02:00