feat: support SecurityPolicy client-IP authorization for UDPRoute - #9833

Open

zhaohuabing wants to merge 12 commits into

envoyproxy:mainfrom

zhaohuabing:api-sp-udproute

Commits on Sep 26, 2026

api: allow SecurityPolicy to target UDPRoute
zhaohuabing
committed
027168f
xds: support client-IP authorization on UDP listeners
zhaohuabing
committed
146e027
gatewayapi: apply SecurityPolicy authorization to UDP routes
zhaohuabing
committed
cf247eb
docs: document SecurityPolicy client-IP authorization for UDPRoute
zhaohuabing
committed
d2b1bb3
test: e2e for SecurityPolicy client-IP authorization on UDPRoute
zhaohuabing
committed
b29211c
test: make the mixed-ordering UDP authorization case cover both directions
zhaohuabing
committed
e451ab6
gatewayapi: fix two L4 SecurityPolicy authorization flaws
zhaohuabing
committed
41f11a2
docs: fix the UDPRoute reference link
zhaohuabing
committed
7242ac7
docs: note that IP restriction also applies to TCPRoute and UDPRoute
zhaohuabing
committed
7924e34
test: give the UDP authorization e2e its own coredns backend
zhaohuabing
committed
08b0601
test: fix yaml sequence indentation in the UDP authorization manifest
zhaohuabing
committed
9c4d19a
test: drop the backend comment from the UDP authorization manifest
zhaohuabing
committed
9979cad