Skip to content

Commit

Permalink
auto-merge envoyproxy/envoy[main] into envoyproxy/envoy-openssl[main]
Browse files Browse the repository at this point in the history
* upstream/main:
  doc: update inotify assertion to provide more accurate feedback (#37111)
  router: pre-reserve header_parser vectors by their sizes (#37130)
  [contrib] Disable GCC warnings and broken features (#37131)
  sub-formatter: store a bool instead of a string (#37141)
  filters: revert to original behavior for invalid content-length handling in CEL Size extractor (#37168)
  mobile: Make the Apple proxy settings monitor refresh interval configurable (#37175)
  mac: set `-Wno-deprecated-declarations` (#37148)
  Add CEL test using typed_filter_config (#37174)
  build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 in /contrib/golang/filters/http/test/test_data/add_data in the contrib-golang group (#37161)
  build(deps): bump yapf from 0.40.2 to 0.43.0 in /tools/base (#37132)
  build(deps): bump setuptools from 75.4.0 to 75.5.0 in /tools/base (#37133)
  build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 in /contrib/golang/filters/http/test/test_data/metric in the contrib-golang group (#37159)
  build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 in /contrib/golang/filters/http/test/test_data/buffer in the contrib-golang group (#37160)
  build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 in /contrib/golang/filters/http/test/test_data/echo in the contrib-golang group (#37162)
  build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 in /contrib/golang/filters/http/test/test_data/access_log in the contrib-golang group (#37163)
  build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 (#37164)
  build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 in /contrib/golang/router/cluster_specifier/test/test_data/simple in the contrib-golang group (#37165)
  build(deps): bump github/codeql-action from 3.27.3 to 3.27.4 (#37166)
  build(deps): bump google.golang.org/protobuf from 1.34.2 to 1.35.2 in /contrib/golang/filters/http/test/test_data/property in the contrib-golang group (#37167)
  build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 in /contrib/golang/filters/http/test/test_data/routeconfig in the contrib-golang group (#37169)
  access_log: add UPSTREAM_HOST_NAME_WITHOUT_PORT variable (#37114)
  filters: optimize cel expression context with constant-time lookups (#37057)
  replace access log list to access log vector (#37103)
  feat: prepare for breaking change in Protobuf C++ API (#37066)
  iouring: compiling out for E-M linux (#37035)
  bump proto_processing_lib to 11d825fb33f92eefcbacbd7b0db9eea8df6e8acb (#37125)
  Update QUICHE from aaf48d2e5 to 3c9db14bb (#37128)
  [quic]Check canonical suffix when checking checking QUIC brokenness (#36981)
  bump protobuf to 28.3 (#37113)
  build(deps): bump github/codeql-action from 3.27.0 to 3.27.3 (#37118)
  build(deps): bump gsutil from 5.30 to 5.31 in /tools/base (#36545)
  build(deps): bump setuptools from 75.3.0 to 75.4.0 in /tools/base (#37105)
  build(deps): bump distroless/base-nossl-debian12 from `aa91f01` to `174f326` in /ci (#37119)
  Fix a bug where DNS jitter can cause milliseconds duration to be interpreted as negative triggering envoy bug. (#36953)
  dns: add round-robin nameserver rotation option to c-ares resolver (#37108)
  Remove race between closing upstream connection and downstream request (#37101)
  ci: Add bazel client caching (#37096)
  tests: use makeOptRef to create an OptRef object (#37110)
  http2: removes the false path for an old runtime feature (#37067)
  benchmark: add route matcher benchmarks for exact and prefix match (#37086)
  lua cluster_specifier: fix lua reference for multiple clusters (#37100)
  odcds: only including if needed (#37034)
  ext_proc: Ext proc half close on destroy and defer reset till trailers received.  (#37083)
  exceptions: Make THROW_OR_RETURN_VALUE work outside the "Envoy" namespace (#37058)
  access log: support upstream connect timing in COMMON_DURATION (#37077)
  build(deps): bump aio-api-bazel from 0.0.2 to 0.0.3 in /tools/base (#37094)
  build(deps): update envoyproxy/toolshed requirement to actions-v0.3.5 (#37093)
  [contrib][vcl] Fix VCL builds with GCC (#37075)
  rbac: add unit tests for matchers to increase coverage (#37080)
  changelog: fix a small typo in rbac deprecation line (#37082)
  Add `arch` to APT repository configuration (#37068)
  rbac: add support for matching on route metadata (#36957)
  tls: add options to validate SANs and send SNI for upstream hostname (#36903)
  lua cluster_specifier: fix crash in getCluster() (#37073)
  deps: Bump `rules_rust` -> 0.54.1 (#37056)
  Enhance ext_proc filter to support MXN streaming (#34942)
  [contrib][postgres] Remove <> after constructor in the PG proxy code (#37038)
  socket: removing some exceptions (#36991)
  ci: Shift (Docker) cache priming to request workflow (#37028)
  quic: Don't delay TCP attempt when HTTP/3 status is unknown (#37040)
  kafka: split protocol generation into .h and .cc files (#37017)
  bazel/ci: Add pre/post repository shas to report (#37062)
  ci: Rename request/checks workflow (#37033)
  bazel: Make `ci` config common (#37027)
  build(deps): bump envoyproxy/toolshed from actions-v0.3.1 to 0.3.2 (#37061)
  [contrib][http language filter] Change position of libstdc++ library when linking ICU tools (#37060)
  docs/proto: Adding comments to fields/enums that have no comments (#37018)
  bazel/ci: Remove old fetch setup (#37014)
  router: removing unused files (#37019)
  Remove extraneous target source/common/common:xds_manager_lib (#37041)
  dns_cache: add more unit tests (#37032)
  dns resolver: add options to initialize c-ares with custom timeout an… (#36947)
  docs: add and fix license URLs (#37029)
  deps: Bump `envoy_examples` -> 0.0.6 (#37023)
  build(deps): bump pygithub from 2.4.0 to 2.5.0 in /tools/base (#37022)
  ext_proc: refactoring onData() to make it modularized (#36999)
  proto: removing some exceptions (#36965)
  ip-tagging filter: add support for an optional ip-tag-header field (#36434)
  S390x - Fix typo for envoy test (#37015)
  boringssl: update to latest chromium stable version (#36899)
  lua cluster_specifier: give access to cluster connection/request counts (#36998)
  golang: expose add{Decoded,Encoded}Data (#36959)
  ci/codeql: Disable "trap" caching (#36985)
  ci: Boost mem for integration test (#37009)
  build(deps): bump envoyproxy/toolshed from actions-v0.2.38 to 0.3.1 (#37013)
  docs/bazel: Fix target visibility (#37008)
  ci/coverage: Fix duplicate flag warning (#36987)
  Add release note for "Relax recent SNI restrictions" (#37000)
  Make CancelWrapper enforce thread constraint (#36993)
  stats: add tag extraction rules for google_grpc client (#36673)
  attributes: add new attribute upstream.request_attempt_count (#36939)
  Relax recent SNI restrictions (#36950)
  build(deps): bump envoyproxy/toolshed from actions-v0.2.37 to 0.2.38 (#36994)
  flow_control: downstream push back sidestream (#35827)
  wasm: remove the shutdown callback in lifetime_notifier (#36688)
  tools: Remove `envoy_package` (#36948)
  deps: Bump `com_google_cel_cpp` -> 0.10.0 (#36940)
  ext_proc: clean up (#36956)
  kafka: close connection when rejectable request appears (#36979)
  github/ci: Fix workflow concurrency (#36952)
  bazel/distribution: Cleanups to fix aquery (#36977)
  docs: update envoy build location (#36986)
  Update QUICHE from 5621f6366 to aaf48d2e5 (#36976)
  mobile: Fix HTTPRequestUsingProxyTest.swift (#36980)
  Added envoy test missing options for s390x (#36915)
  Add cancelWrapper helper function in /common. (#36938)
  router: use template method to avoid unused memory allocations in HeaderData (#36878)
  xds: delta-xDS avoid copying resources (#36832)
  deps/api: Bump `envoy_toolshed` -> 0.1.15 (#36969)
  github/ci: Workaround `macos-12` brownout by boosting images (#36972)
  sds: relax backing cluster check to allow dynamic clusters (#36694)
  json: reduce exceptions (#36919)
  headers/geoip: Fix macro (#36964)
  ads-replacement: adding hook and cluster-manager support (#36768)
  srds: remove a redundant if block (#36944)
  ci: Quieten GCS artifact uploads (#36949)
  matchers: remove unneeded ListMatcher data member (#36902)
  Partial revert of "mobile: resolving how forcev6 works on mobile plat… (#36922)
  build(deps): bump orjson from 3.10.10 to 3.10.11 in /tools/base (#36960)
  address: removing some exceptions (#36754)
  api: HTTP APIKey Auth Filter (#36709)
  golang: provide method to refresh route cache (#36863)
  wasm: remove unused public interfaces (#36941)
  tools: updating oncall test triage location (#36937)
  ci/rbe: Boost cpus for more flakey tests (#36942)
  wasm: prevent stuck connections in case of multiple local replies (#36809)
  udp_proxy: Support dynamic cluster selection per session (#36868)
  srds: permit dynamic SRDS resources to contain inline RDS configuration (#36703)
  http: removing the default trusted address list (#36643)
  proto: reducing exceptions (#36872)
  ci/rbe: Boost cpus for some more integration tests (#36930)
  build(deps): bump envoy-base-utils from 0.5.6 to 0.5.7 in /tools/base (#36935)
  deps/api: Bump `com_github_bufbuild_buf` -> 1.46.0 (#36933)
  deps: Bump `build_bazel_rules_apple` -> 3.11.2 (#36932)
  build(deps): bump setuptools from 75.2.0 to 75.3.0 in /tools/base (#36906)
  build(deps): bump slack-sdk from 3.33.2 to 3.33.3 in /tools/base (#36905)
  tests: add integration test to quic_stats for long certificate chain (#36926)
  add OLM scaling for max_connection_duration (#36816)
  config: removing unpackToOrThrow in favor of unpackTo (#36821)
  srds: remove scope from scope_name_by_hash_ in case the scope key changes (#36702)
  test: fix os_sys_calls_test in some less common environments (#36923)
  tools/python: Fix macro format issue (#36916)
  router: converting internal_only_headers from list to vector (#36898)
  Remove unused listener FilterChain on_demand_configuration field (#36786)
  tools/python: Fix namespacing in entry_point macros (#36914)
  route: remove redundant loader reference in weighted cluster entries (#36836)
  wasm: removed automatical route refreshment and add a foreign function to clear the route cache (#36671)
  deps/api: Bump `envoy_toolshed` -> 0.1.13 (#36892)
  ci/rbe: Boost cpu for another integration test (#36901)
  tls: Expose well-known certificate subject fields in Lua filter (#35994)
  bazel/deps: Fix `rules_license` setup (#36900)
  [mobile]fix jni parameter type (#36896)
  quic: add debug visitor to export various quic stats from quiche (#36813)
  context: use server factory context as lb context (#36874)
  runtime: removed defer processing flag and legacy codepaths. (#36731)
  http2: protects client against stream not found (#36573)
  ci/rbe: Boost cpu for another integration test (#36885)
  build(deps): bump actions/dependency-review-action from 4.3.5 to 4.4.0 (#36883)
  fix typo in the code comment (#36875)
  Update QUICHE from 0d1ce7087 to 5621f6366 (#36869)
  mobile: Fix a PAC proxy error check bug (#36876)
  runtime: Enable UDP GRO by default (#36811)
  Deprecating and removing envoy.reloadable_features.edf_lb_locality_scheduler_init_fix (#36835)
  ci: Use repo settings for upload buckets (#36870)
  flow_control: Refactor setWatermark (#36738)
  bazel/ci: Add repo customizations (#36831)
  deps: Bump `bazel_features` -> 1.20.0 (#36855)
  deps: Bump `rules_python` -> 0.37.2 (#36854)
  dependabot: add missing contrib-golang group to some gomod (#36849)
  build(deps): bump distroless/base-nossl-debian12 from `e130c09` to `aa91f01` in /ci (#36847)
  ci/coverage: Fix accidental ws (#36839)
  oauth2: enable `use_refresh_token` by default (#36065)
  Update QUICHE from 408e786de to 0d1ce7087 (#36822)
  ci/rbe: Boost cpus for more integration tests (#36837)
  ci/coverage: Fix coverage flake in `source/extensions/common` (#36838)
  route: Downgrade advisory log message (#36797)
  runtime: deprecate validate_grpc_header (#36757)
  rbe/ci: Bump cpus for kv/store integration test (#36834)
  deps: Bump `build_bazel_rules_apple` -> 3.10.0 (#36833)
  protobuf.patch: a bunch of updates, mostly backports (#36823)
  coverage: loosen (#36830)
  ci/rbe: Boost cpu/mem for more integration tests (#36825)
  deps: Bump `com_github_awslabs_aws_c_auth` -> 0.8.0 (#36827)
  deps: Bump `aspect_bazel_lib` -> 2.9.3 (#36726)
  deps/api: Bump `dev_cel` -> 0.18.0 (#36826)
  build(deps): bump slack-sdk from 3.33.1 to 3.33.2 in /tools/base (#36824)
  router: clean up unnecessary field (#36814)
  request id: minor optimization or fix to the request id logic (#36773)
  deps: Bump `com_github_nghttp2_nghttp2` -> 1.64.0 (#36743)
  Set resource `telemetry.sdk.*` and scope `otel.scope.name|version` attributes for the OpenTelemetry tracer (#36787)
  Backport grpc change to fix some protoc warnings (#36795)
  wasm: restart wasm vm if it's failed because runtime error (#36456)
  deps: Bump `rules_python` -> 0.37.1 (#36817)
  proxy_protocol: use no-throw addresses to remove exception handling (#36815)
  tools/python: Remove unused loading of old py macro (#36820)
  tools/python: Use newer `entry_point` rule (#36803)
  ci/codeql: Only run on main branch (#36806)
  ci/rbe: Adjust keepalives for cache (envoy and mobile) (#36810)
  ci/rbe: Boost cpus for a couple more integration tests (#36807)
  tls: support IP SANs for IP versions not supported by host OS (#36770)
  dynamic_modules: scaffolds config API & HTTP Filter (#36448)
  Refactor UDP proxy to support deferred cluster selection (#36700)
  coverage: ratcheting (#36762)
  quic: remove runtime guard and code for legacy cert handling (#36772)
  Deprecating and removing envoy.reloadable_features.edf_lb_host_scheduler_init_fix (#36794)
  build(deps): bump actions/checkout from 4.2.1 to 4.2.2 (#36798)
  [balsa] Add runtime flag for http_inspector parser (#36672)
  tls: reduce memory use per connection by 712 bytes (#36767)
  ci/tests: Boost more worker cores for flakey integration tests (#36793)
  bump cel-cpp (#36661)
  ci/tests: Revert some integration tests to `2core` (#36784)
  mobile: resolving how forcev6 works on mobile platforms (#36732)
  build(deps): bump github/codeql-action from 3.26.13 to 3.27.0 (#36774)
  build(deps): bump protobuf from 5.28.2 to 5.28.3 in /tools/base (#36775)
  build(deps): bump orjson from 3.10.9 to 3.10.10 in /tools/base (#36776)
  ci/macos: Increase timeout to 120m (#36719)
  ci/coverage: Remove more cruft in diskspace hack (#36720)
  aws: async bugfix for multiple credential handlers in upstream mode (#36707)
  Allow empty resolver list for cares dns (#36735)
  runtime: removing dns_reresolve_on_eai_again (#36656)
  mobile: Adds proxy.pac to test PAC file URL (#36765)
  ci/rbe: Switch rbe pools `2core` -> `6gig` (#36761)
  ocsp/formatting: Fix format issue in generated cert (#36763)
  deps: Switch hosting server for kafka server binary download (#36748)
  test/ocsp: Renew certificates (#36755)
  upstream: removing exceptions from hostimpl (#36582)
  deps: Bump `rules_rust` -> 0.53.0 (#36727)
  deps: Bump `rules_jvm_external` -> 6.4 (#36721)
  build(deps): bump actions/dependency-review-action from 4.3.4 to 4.3.5 (#36740)
  Add support for OtherName, Email SAN substitution formatters (#36502)
  wasm: remove redundant xds attributes (#36619)
  apple_dns: Add DNS query trace (#36678)
  mobile: Fixes for the Apple PAC proxy resolver (#36698)
  mobile: change to being more aggressive about HTTP/3 retries (#36734)
  ci/rbe: Switch backend RBE cluster (#36730)
  deps/release: Bump Ubuntu -> 0e5e4a5 (#36723)
  Fix documentation for TcpProxy.metadata_match (#36683)
  build: fix compile commands generation (#36693)
  add test suites for classes in hash_policy.cc file (#36708)
  router: remove send_local_reply_when_no_buffer_and_upstream_request guard (#36620)
  mobile: add knob for h3 keepalive (#36646)
  test: Add a knob to disable admin server in IntegrationTestServer (#36684)
  build(deps): bump orjson from 3.10.7 to 3.10.9 in /tools/base (#36714)
  build(deps): bump envoy-base-utils from 0.5.5 to 0.5.6 in /tools/base (#36690)
  build(deps): bump cryptography from 43.0.1 to 43.0.3 in /tools/base (#36715)
  aws_signing: support for dynamically configurable credential (#36217)
  http: initializes a field of ConnectionManagerImpl::ActiveStream::State. (#36642)
  test: deflake an integration test (#36674)
  ci/rbe: Use engflow for non-coverage checks (#36687)
  xds-failover: fixing runtime feature flag in tests (#36659)
  security-release: update the q3 release record (#36689)

Signed-off-by: tedjpoole <[email protected]>
  • Loading branch information
tedjpoole committed Nov 17, 2024
2 parents 359eb83 + 79d14e3 commit 12aae1a
Show file tree
Hide file tree
Showing 1,171 changed files with 22,124 additions and 8,876 deletions.
69 changes: 44 additions & 25 deletions .bazelrc
Original file line number Diff line number Diff line change
Expand Up @@ -57,9 +57,9 @@ test --experimental_ui_max_stdouterr_bytes=11712829 #default 1048576
# Allow tags to influence execution requirements
common --experimental_allow_tags_propagation

build:linux --copt=-fdebug-types-section
# Enable position independent code (this is the default on macOS and Windows)
# (Workaround for https://github.com/bazelbuild/rules_foreign_cc/issues/421)
build:linux --copt=-fdebug-types-section
build:linux --copt=-fPIC
build:linux --copt=-Wno-deprecated-declarations
build:linux --cxxopt=-std=c++20 --host_cxxopt=-std=c++20
Expand Down Expand Up @@ -95,6 +95,21 @@ build:gcc --linkopt=-fuse-ld=gold --host_linkopt=-fuse-ld=gold
build:gcc --test_env=HEAPCHECK=
build:gcc --action_env=BAZEL_COMPILER=gcc
build:gcc --action_env=CC=gcc --action_env=CXX=g++
# This is to work around a bug in GCC that makes debug-types-section
# option not play well with fission:
# https://gcc.gnu.org/bugzilla/show_bug.cgi?id=110885
build:gcc --copt=-fno-debug-types-section
# These trigger errors in multiple places both in Envoy dependecies
# and in Envoy code itself when using GCC.
# And in all cases the reports appear to be clear false positives.
build:gcc --copt=-Wno-error=restrict
build:gcc --copt=-Wno-error=uninitialized
build:gcc --cxxopt=-Wno-missing-requires
# We need this because -Wno-missing-requires options is rather new
# in GCC, so flags -Wno-missing-requires exists in GCC 12, but does
# not in GCC 11 and GCC 11 is what is used in docker-gcc
# configuration currently
build:gcc --cxxopt=-Wno-unknown-warning

# Clang-tidy
# TODO(phlax): enable this, its throwing some errors as well as finding more issues
Expand Down Expand Up @@ -142,6 +157,7 @@ build:clang-asan --linkopt=-fsanitize=vptr,function

# macOS
build:macos --cxxopt=-std=c++20 --host_cxxopt=-std=c++20
build:macos --copt=-Wno-deprecated-declarations
build:macos --action_env=PATH=/opt/homebrew/bin:/opt/local/bin:/usr/local/bin:/usr/bin:/bin
build:macos --host_action_env=PATH=/opt/homebrew/bin:/opt/local/bin:/usr/local/bin:/usr/bin:/bin
build:macos --define tcmalloc=disabled
Expand Down Expand Up @@ -374,6 +390,7 @@ build:docker-clang-libc++ --config=docker-sandbox
build:docker-clang-libc++ --config=rbe-toolchain-clang-libc++

build:docker-gcc --config=docker-sandbox
build:docker-gcc --config=gcc
build:docker-gcc --config=rbe-toolchain-gcc

build:docker-asan --config=docker-sandbox
Expand All @@ -393,9 +410,9 @@ build:remote-ci --config=ci
build:remote-ci --remote_download_minimal

# Note this config is used by mobile CI also.
build:ci --noshow_progress
build:ci --noshow_loading_progress
build:ci --test_output=errors
common:ci --noshow_progress
common:ci --noshow_loading_progress
common:ci --test_output=errors

# Fuzz builds

Expand Down Expand Up @@ -505,33 +522,34 @@ build:rbe-engflow --remote_executor=grpcs://envoy.cluster.engflow.com
build:rbe-engflow --bes_backend=grpcs://envoy.cluster.engflow.com/
build:rbe-engflow --bes_results_url=https://envoy.cluster.engflow.com/invocation/
build:rbe-engflow --credential_helper=*.engflow.com=%workspace%/bazel/engflow-bazel-credential-helper.sh
build:rbe-engflow --grpc_keepalive_time=30s
build:rbe-engflow --grpc_keepalive_time=60s
build:rbe-engflow --grpc_keepalive_timeout=30s
build:rbe-engflow --remote_timeout=3600s
build:rbe-engflow --bes_timeout=3600s
build:rbe-engflow --bes_upload_mode=fully_async
build:rbe-engflow --nolegacy_important_outputs

# RBE (Engflow Envoy)
build:common-envoy-engflow --google_default_credentials=false
build:common-envoy-engflow --credential_helper=*.engflow.com=%workspace%/bazel/engflow-bazel-credential-helper.sh
build:common-envoy-engflow --grpc_keepalive_time=30s

build:cache-envoy-engflow --remote_cache=grpcs://morganite.cluster.engflow.com
build:cache-envoy-engflow --remote_timeout=3600s
build:bes-envoy-engflow --bes_backend=grpcs://morganite.cluster.engflow.com/
build:bes-envoy-engflow --bes_results_url=https://morganite.cluster.engflow.com/invocation/
build:bes-envoy-engflow --bes_timeout=3600s
build:bes-envoy-engflow --bes_upload_mode=fully_async
build:bes-envoy-engflow --nolegacy_important_outputs
build:rbe-envoy-engflow --remote_executor=grpcs://morganite.cluster.engflow.com
build:rbe-envoy-engflow --remote_default_exec_properties=container-image=docker://gcr.io/envoy-ci/envoy-build@sha256:7adc40c09508f957624c4d2e0f5aeecb73a59207ee6ded53b107eac828c091b2
build:rbe-envoy-engflow --jobs=200
build:rbe-envoy-engflow --define=engflow_rbe=true

build:remote-envoy-engflow --config=common-envoy-engflow
build:remote-envoy-engflow --config=cache-envoy-engflow
build:remote-envoy-engflow --config=bes-envoy-engflow
build:remote-envoy-engflow --config=rbe-envoy-engflow
common:common-envoy-engflow --google_default_credentials=false
common:common-envoy-engflow --credential_helper=*.engflow.com=%workspace%/bazel/engflow-bazel-credential-helper.sh
common:common-envoy-engflow --grpc_keepalive_time=60s
common:common-envoy-engflow --grpc_keepalive_timeout=30s

common:cache-envoy-engflow --remote_cache=grpcs://mordenite.cluster.engflow.com
common:cache-envoy-engflow --remote_timeout=3600s
common:bes-envoy-engflow --bes_backend=grpcs://mordenite.cluster.engflow.com/
common:bes-envoy-engflow --bes_results_url=https://mordenite.cluster.engflow.com/invocation/
common:bes-envoy-engflow --bes_timeout=3600s
common:bes-envoy-engflow --bes_upload_mode=fully_async
common:bes-envoy-engflow --nolegacy_important_outputs
common:rbe-envoy-engflow --remote_executor=grpcs://mordenite.cluster.engflow.com
common:rbe-envoy-engflow --remote_default_exec_properties=container-image=docker://gcr.io/envoy-ci/envoy-build@sha256:7adc40c09508f957624c4d2e0f5aeecb73a59207ee6ded53b107eac828c091b2
common:rbe-envoy-engflow --jobs=200
common:rbe-envoy-engflow --define=engflow_rbe=true

common:remote-envoy-engflow --config=common-envoy-engflow
common:remote-envoy-engflow --config=cache-envoy-engflow
common:remote-envoy-engflow --config=rbe-envoy-engflow

#############################################################################
# debug: Various Bazel debugging flags
Expand All @@ -555,6 +573,7 @@ common:debug --config=debug-sandbox
common:debug --config=debug-coverage
common:debug --config=debug-tests

try-import %workspace%/repo.bazelrc
try-import %workspace%/clang.bazelrc
try-import %workspace%/user.bazelrc
try-import %workspace%/local_tsan.bazelrc
36 changes: 27 additions & 9 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@ updates:
time: "06:00"

- package-ecosystem: "gomod"
directory: "/contrib/golang/filters/http/test/test_data/basic"
directory: "/contrib/golang/filters/http/test/test_data/access_log"
groups:
contrib-golang:
patterns:
Expand All @@ -51,7 +51,7 @@ updates:
time: "06:00"

- package-ecosystem: "gomod"
directory: "/contrib/golang/filters/http/test/test_data/dummy"
directory: "/contrib/golang/filters/http/test/test_data/action"
groups:
contrib-golang:
patterns:
Expand All @@ -61,7 +61,7 @@ updates:
time: "06:00"

- package-ecosystem: "gomod"
directory: "/contrib/golang/filters/http/test/test_data/echo"
directory: "/contrib/golang/filters/http/test/test_data/add_data"
groups:
contrib-golang:
patterns:
Expand All @@ -71,7 +71,7 @@ updates:
time: "06:00"

- package-ecosystem: "gomod"
directory: "/contrib/golang/filters/http/test/test_data/metric"
directory: "/contrib/golang/filters/http/test/test_data/basic"
groups:
contrib-golang:
patterns:
Expand All @@ -81,7 +81,7 @@ updates:
time: "06:00"

- package-ecosystem: "gomod"
directory: "/contrib/golang/filters/http/test/test_data/passthrough"
directory: "/contrib/golang/filters/http/test/test_data/buffer"
groups:
contrib-golang:
patterns:
Expand All @@ -91,7 +91,7 @@ updates:
time: "06:00"

- package-ecosystem: "gomod"
directory: "/contrib/golang/filters/http/test/test_data/access_log"
directory: "/contrib/golang/filters/http/test/test_data/dummy"
groups:
contrib-golang:
patterns:
Expand All @@ -101,7 +101,7 @@ updates:
time: "06:00"

- package-ecosystem: "gomod"
directory: "/contrib/golang/filters/http/test/test_data/action"
directory: "/contrib/golang/filters/http/test/test_data/echo"
groups:
contrib-golang:
patterns:
Expand All @@ -111,7 +111,7 @@ updates:
time: "06:00"

- package-ecosystem: "gomod"
directory: "/contrib/golang/filters/http/test/test_data/buffer"
directory: "/contrib/golang/filters/http/test/test_data/metric"
groups:
contrib-golang:
patterns:
Expand All @@ -121,7 +121,7 @@ updates:
time: "06:00"

- package-ecosystem: "gomod"
directory: "/contrib/golang/filters/http/test/test_data/routeconfig"
directory: "/contrib/golang/filters/http/test/test_data/passthrough"
groups:
contrib-golang:
patterns:
Expand All @@ -132,12 +132,30 @@ updates:

- package-ecosystem: "gomod"
directory: "/contrib/golang/filters/http/test/test_data/property"
groups:
contrib-golang:
patterns:
- "*"
schedule:
interval: daily
time: "06:00"

- package-ecosystem: "gomod"
directory: "/contrib/golang/filters/http/test/test_data/routeconfig"
groups:
contrib-golang:
patterns:
- "*"
schedule:
interval: daily
time: "06:00"

- package-ecosystem: "gomod"
directory: "/contrib/golang/filters/http/test/test_data/websocket"
groups:
contrib-golang:
patterns:
- "*"
schedule:
interval: daily
time: "06:00"
Expand Down
11 changes: 8 additions & 3 deletions .github/workflows/_check_build.yml
Original file line number Diff line number Diff line change
Expand Up @@ -6,9 +6,13 @@ permissions:
on:
workflow_call:
secrets:
gcp-key:
gcs-cache-key:
required: true

inputs:
gcs-cache-bucket:
type: string
required: true
request:
type: string
required: true
Expand All @@ -24,20 +28,21 @@ concurrency:
jobs:
build:
secrets:
gcp-key: ${{ secrets.gcp-key }}
gcs-cache-key: ${{ secrets.gcs-cache-key }}
permissions:
contents: read
packages: read
uses: ./.github/workflows/_run.yml
name: ${{ matrix.name ||matrix.target }}
with:
# bazel-extra: '--config=remote-envoy-engflow'
bazel-extra: '--config=remote-envoy-engflow'
cache-build-image: ${{ fromJSON(inputs.request).request.build-image.default }}
concurrency-suffix: -${{ matrix.target }}
error-match: |
ERROR
error:
Error:
gcs-cache-bucket: ${{ inputs.gcs-cache-bucket }}
rbe: true
request: ${{ inputs.request }}
target: ${{ matrix.target }}
Expand Down
14 changes: 13 additions & 1 deletion .github/workflows/_check_coverage.yml
Original file line number Diff line number Diff line change
Expand Up @@ -6,9 +6,15 @@ permissions:
on:
workflow_call:
secrets:
gcs-cache-key:
required: true
gcp-key:
required: true

inputs:
gcs-cache-bucket:
type: string
required: true
request:
type: string
required: true
Expand All @@ -24,6 +30,7 @@ concurrency:
jobs:
coverage:
secrets:
gcs-cache-key: ${{ secrets.gcs-cache-key }}
gcp-key: ${{ secrets.gcp-key }}
permissions:
contents: read
Expand All @@ -35,18 +42,20 @@ jobs:
cache-build-image: ${{ fromJSON(inputs.request).request.build-image.default }}
concurrency-suffix: -${{ matrix.target }}
diskspace-hack: ${{ matrix.diskspace-hack || false }}
diskspace-hack-paths: ${{ matrix.diskspace-hack-paths || '' }}
error-match: |
ERROR
error:
Error:
lower than limit
gcs-cache-bucket: ${{ inputs.gcs-cache-bucket }}
rbe: true
request: ${{ inputs.request }}
steps-post: |
- run: ci/run_envoy_docker.sh 'ci/do_ci.sh ${{ matrix.target }}-upload'
shell: bash
env:
GCS_ARTIFACT_BUCKET: ${{ inputs.trusted && 'envoy-postsubmit' || 'envoy-pr' }}
GCS_ARTIFACT_BUCKET: ${{ inputs.trusted && vars.GCS_ARTIFACT_BUCKET_POST || vars.GCS_ARTIFACT_BUCKET_PRE }}
GCS_REDIRECT_PATH: ${{ fromJSON(inputs.request).request.pr || fromJSON(inputs.request).request.target-branch }}
target: ${{ matrix.target }}
timeout-minutes: 180
Expand All @@ -58,5 +67,8 @@ jobs:
- target: coverage
name: Coverage
diskspace-hack: true
diskspace-hack-paths: |
/opt/hostedtoolcache
/usr/local
- target: fuzz_coverage
name: Fuzz coverage
11 changes: 8 additions & 3 deletions .github/workflows/_check_san.yml
Original file line number Diff line number Diff line change
Expand Up @@ -6,9 +6,13 @@ permissions:
on:
workflow_call:
secrets:
gcp-key:
gcs-cache-key:
required: true

inputs:
gcs-cache-bucket:
type: string
required: true
request:
type: string
required: true
Expand All @@ -24,21 +28,22 @@ concurrency:
jobs:
san:
secrets:
gcp-key: ${{ secrets.gcp-key }}
gcs-cache-key: ${{ secrets.gcs-cache-key }}
permissions:
contents: read
packages: read
uses: ./.github/workflows/_run.yml
name: ${{ matrix.target }}
with:
# bazel-extra: '--config=remote-envoy-engflow'
bazel-extra: '--config=remote-envoy-engflow'
cache-build-image: ${{ fromJSON(inputs.request).request.build-image.default }}
concurrency-suffix: -${{ matrix.target }}
request: ${{ inputs.request }}
error-match: |
ERROR
error:
Error:
gcs-cache-bucket: ${{ inputs.gcs-cache-bucket }}
rbe: ${{ matrix.rbe }}
target: ${{ matrix.target }}
timeout-minutes: 180
Expand Down
Loading

0 comments on commit 12aae1a

Please sign in to comment.