From 12cf4fcff8fd465e4d54fa3b307f059dd69184ad Mon Sep 17 00:00:00 2001 From: xtine Date: Fri, 7 Nov 2025 14:55:09 -0500 Subject: [PATCH 1/2] Conformance: Add Cilium conformance report for v1.4 Signed-off-by: xtine --- conformance/reports/v1.4.0/cilium/README.md | 12 ++ ...rimental-v1.19.0-pre.2-default-report.yaml | 135 ++++++++++++++++++ 2 files changed, 147 insertions(+) create mode 100644 conformance/reports/v1.4.0/cilium/README.md create mode 100644 conformance/reports/v1.4.0/cilium/experimental-v1.19.0-pre.2-default-report.yaml diff --git a/conformance/reports/v1.4.0/cilium/README.md b/conformance/reports/v1.4.0/cilium/README.md new file mode 100644 index 0000000000..83574732cc --- /dev/null +++ b/conformance/reports/v1.4.0/cilium/README.md @@ -0,0 +1,12 @@ +# Cilium + +## Table of Contents + +| API channel | Implementation version | Mode | Report | +|--------------|-------------------------------------------|---------|--------------------------------------------------------| +| experimental | [main](https://github.com/cilium/cilium/) | default | [main report](./experimental-v1.19.0-pre.2-default-report.yaml) | + +## Reproduce + +Cilium conformance tests can be reproduced by follow the steps in CI `.github/workflows/conformance-gateway-api.yaml` +from within the [Cilium repo](https://github.com/cilium/cilium). diff --git a/conformance/reports/v1.4.0/cilium/experimental-v1.19.0-pre.2-default-report.yaml b/conformance/reports/v1.4.0/cilium/experimental-v1.19.0-pre.2-default-report.yaml new file mode 100644 index 0000000000..13784d09b3 --- /dev/null +++ b/conformance/reports/v1.4.0/cilium/experimental-v1.19.0-pre.2-default-report.yaml @@ -0,0 +1,135 @@ +apiVersion: gateway.networking.k8s.io/v1 +date: "2025-11-07T14:41:20-05:00" +gatewayAPIChannel: experimental +gatewayAPIVersion: v1.4.0 +implementation: + contact: + - https://github.com/cilium/community/blob/main/roles/Maintainers.md + organization: cilium + project: cilium + url: github.com/cilium/cilium + version: 1.19.0-pre.2 +kind: ConformanceReport +mode: default +profiles: +- core: + result: success + statistics: + Failed: 0 + Passed: 13 + Skipped: 0 + extended: + result: success + statistics: + Failed: 0 + Passed: 3 + Skipped: 0 + supportedFeatures: + - GatewayAddressEmpty + - GatewayHTTPListenerIsolation + - GatewayInfrastructurePropagation + - GatewayPort8080 + - GatewayStaticAddresses + name: GATEWAY-GRPC + summary: Core tests succeeded. Extended tests succeeded. +- core: + result: success + statistics: + Failed: 0 + Passed: 33 + Skipped: 0 + extended: + result: success + statistics: + Failed: 0 + Passed: 25 + Skipped: 0 + supportedFeatures: + - GatewayAddressEmpty + - GatewayHTTPListenerIsolation + - GatewayInfrastructurePropagation + - GatewayPort8080 + - GatewayStaticAddresses + - HTTPRouteBackendProtocolH2C + - HTTPRouteBackendProtocolWebSocket + - HTTPRouteBackendRequestHeaderModification + - HTTPRouteBackendTimeout + - HTTPRouteDestinationPortMatching + - HTTPRouteHostRewrite + - HTTPRouteMethodMatching + - HTTPRouteNamedRouteRule + - HTTPRoutePathRedirect + - HTTPRoutePathRewrite + - HTTPRoutePortRedirect + - HTTPRouteQueryParamMatching + - HTTPRouteRequestMirror + - HTTPRouteRequestMultipleMirrors + - HTTPRouteRequestPercentageMirror + - HTTPRouteRequestTimeout + - HTTPRouteResponseHeaderModification + - HTTPRouteSchemeRedirect + unsupportedFeatures: + - HTTPRouteCORS + - HTTPRouteParentRefPort + name: GATEWAY-HTTP + summary: Core tests succeeded. Extended tests succeeded. +- core: + result: success + statistics: + Failed: 0 + Passed: 11 + Skipped: 0 + extended: + result: success + statistics: + Failed: 0 + Passed: 3 + Skipped: 0 + supportedFeatures: + - GatewayAddressEmpty + - GatewayHTTPListenerIsolation + - GatewayInfrastructurePropagation + - GatewayPort8080 + - GatewayStaticAddresses + name: GATEWAY-TLS + summary: Core tests succeeded. Extended tests succeeded. +- core: + result: success + statistics: + Failed: 0 + Passed: 2 + Skipped: 0 + name: MESH-GRPC + summary: Core tests succeeded. +- core: + result: success + statistics: + Failed: 0 + Passed: 7 + Skipped: 0 + extended: + result: success + statistics: + Failed: 0 + Passed: 7 + Skipped: 0 + supportedFeatures: + - MeshClusterIPMatching + - MeshHTTPRouteBackendRequestHeaderModification + - MeshHTTPRouteNamedRouteRule + - MeshHTTPRouteQueryParamMatching + - MeshHTTPRouteRedirectPath + - MeshHTTPRouteRedirectPort + - MeshHTTPRouteRewritePath + - MeshHTTPRouteSchemeRedirect + unsupportedFeatures: + - MeshConsumerRoute + name: MESH-HTTP + summary: Core tests succeeded. Extended tests succeeded. +succeededProvisionalTests: +- GRPCRouteNamedRule +- GatewayInfrastructure +- GatewayOptionalAddressValue +- HTTPRouteNamedRule +- HTTPRouteRequestPercentageMirror +- MeshHTTPRouteNamedRule From 4b7a5f0e523b07efaa573fba5c349777d2383d5b Mon Sep 17 00:00:00 2001 From: xtine Date: Mon, 10 Nov 2025 15:33:25 -0500 Subject: [PATCH 2/2] Update cilium conformance badge and version, table Signed-off-by: xtine --- site-src/implementations.md | 4 +-- site-src/implementations/v1.4.md | 62 ++++++++++++++++++++++++++++++++ 2 files changed, 64 insertions(+), 2 deletions(-) create mode 100644 site-src/implementations/v1.4.md diff --git a/site-src/implementations.md b/site-src/implementations.md index 39dd8612f8..7b692c9cc6 100644 --- a/site-src/implementations.md +++ b/site-src/implementations.md @@ -261,7 +261,7 @@ Documentation to deploy and use AKO Gateway API can be found at [Avi Kubernetes ### Cilium -[![Conformance](https://img.shields.io/badge/Gateway%20API%20Conformance%20v1.3.0-Cilium-green)](https://github.com/kubernetes-sigs/gateway-api/blob/main/conformance/reports/v1.3.0/cilium-cilium) +[![Conformance](https://img.shields.io/badge/Gateway%20API%20Conformance%20v1.4.0-Cilium-green)](https://github.com/kubernetes-sigs/gateway-api/blob/main/conformance/reports/v1.4.0/cilium) [Cilium][cilium] is an eBPF-based networking, observability and security solution for Kubernetes and other networking environments. It includes [Cilium @@ -269,7 +269,7 @@ Service Mesh][cilium-service-mesh], a highly efficient mesh data plane that can be run in [sidecarless mode][cilium-sidecarless] to dramatically improve performance, and avoid the operational complexity of sidecars. Cilium also supports the sidecar proxy model, offering choice to users. -Cilium supports Gateway API, passing conformance for v1.3.0 as of [Cilium 1.18][cilium118blog]. +Cilium supports Gateway API, passing conformance for v1.4.0 as of Cilium 1.19 Cilium is open source and is a CNCF Graduated project. diff --git a/site-src/implementations/v1.4.md b/site-src/implementations/v1.4.md new file mode 100644 index 0000000000..0f4af16281 --- /dev/null +++ b/site-src/implementations/v1.4.md @@ -0,0 +1,62 @@ + +The following tables are populated from the conformance reports [uploaded by project implementations](https://github.com/kubernetes-sigs/gateway-api/tree/main/conformance/reports). They are separated into the extended features that each project supports listed in their reports. +Implementations only appear in this page if they pass Core conformance for the resource type, and the features listed should be Extended features. Implementations that submit conformance reports with skipped tests won't appear in the tables. + + + +???+ warning + + + This page is under active development and is not in its final form, + especially for the project name and the names of the features. + However, as it is based on submitted conformance reports, the information is correct. + + +## Gateway Profile + +### HTTPRoute + +| Organization | Project | Version | Mode | Core | Gateway Port 8080 | HTTPRoute Host Rewrite | HTTPRoute Path Redirect | HTTPRoute Request Mirror | HTTPRoute Request Percentage Mirror | HTTPRoute Response Header Modification | HTTPRoute Scheme Redirect | Gateway Address Empty | Gateway HTTP Listener Isolation | Gateway Infrastructure Propagation | HTTPRoute Backend Protocol H2C | HTTPRoute Backend Protocol Web Socket | HTTPRoute Backend Request Header Modification | HTTPRoute Backend Timeout | HTTPRoute CORS | HTTPRoute Destination Port Matching | HTTPRoute Method Matching | HTTPRoute Named Route Rule | HTTPRoute Parent Ref Port | HTTPRoute Path Rewrite | HTTPRoute Port Redirect | HTTPRoute Query Param Matching | HTTPRoute Request Multiple Mirrors | HTTPRoute Request Timeout | Gateway Static Addresses | +|:---------------|:--------------|:-------------------|:-----------------------|:-------------------|:--------------------|:-------------------------|:--------------------------|:---------------------------|:--------------------------------------|:-----------------------------------------|:----------------------------|:------------------------|:----------------------------------|:-------------------------------------|:---------------------------------|:----------------------------------------|:------------------------------------------------|:----------------------------|:-------------------|:--------------------------------------|:----------------------------|:-----------------------------|:----------------------------|:-------------------------|:--------------------------|:---------------------------------|:-------------------------------------|:----------------------------|:---------------------------| +| GKE | gke-gateway | 1.34.1-gke.1829001 | default | :x: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | :x: | :x: | :x: | :x: | :x: | :x: | :x: | :x: | :x: | :x: | :x: | :x: | :x: | :x: | :x: | :x: | :x: | +| agentgateway | agentgateway | v2.2.0-alpha.1 | default | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | +| airlock | microgateway | 4.8.0-alpha1 | default | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | :x: | :white_check_mark: | :white_check_mark: | :x: | :x: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | :white_check_mark: | :x: | +| cilium | cilium | 1.19.0-pre.2 | default | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | +| envoyproxy | envoy-gateway | v1.6.0-rc.1 | default | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | +| envoyproxy | envoy-gateway | v1.6.0-rc.1 | gateway-namespace-mode | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | +| istio | istio | 1.28 | default | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | +| kgateway-dev | kgateway | v2.1.0 | default | :white_check_mark: | :x: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | :x: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | :white_check_mark: | :x: | +| traefik | traefik | v3.6 | default | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | :x: | :white_check_mark: | :white_check_mark: | :x: | :x: | :x: | :white_check_mark: | :white_check_mark: | :x: | :x: | :x: | :white_check_mark: | :white_check_mark: | :x: | :x: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | :x: | :x: | + +### GRPCRoute + +| Organization | Project | Version | Mode | Core | Gateway Address Empty | Gateway HTTP Listener Isolation | Gateway Infrastructure Propagation | Gateway Port 8080 | Gateway Static Addresses | +|:---------------|:--------------|:---------------|:-----------------------|:-------------------|:------------------------|:----------------------------------|:-------------------------------------|:--------------------|:---------------------------| +| agentgateway | agentgateway | v2.2.0-alpha.1 | default | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | +| cilium | cilium | 1.19.0-pre.2 | default | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | +| envoyproxy | envoy-gateway | v1.6.0-rc.1 | default | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | :white_check_mark: | :x: | +| envoyproxy | envoy-gateway | v1.6.0-rc.1 | gateway-namespace-mode | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | +| istio | istio | 1.28 | default | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | +| kgateway-dev | kgateway | v2.1.0 | default | :white_check_mark: | :white_check_mark: | :x: | :x: | :x: | :x: | +| traefik | traefik | v3.6 | default | :white_check_mark: | :x: | :x: | :x: | :x: | :x: | + +### TLSRoute + +| Organization | Project | Version | Mode | Core | Gateway Address Empty | Gateway HTTP Listener Isolation | Gateway Infrastructure Propagation | Gateway Port 8080 | Gateway Static Addresses | +|:---------------|:--------------|:---------------|:-----------------------|:-------------------|:------------------------|:----------------------------------|:-------------------------------------|:--------------------|:---------------------------| +| agentgateway | agentgateway | v2.2.0-alpha.1 | default | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | +| cilium | cilium | 1.19.0-pre.2 | default | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | +| envoyproxy | envoy-gateway | v1.6.0-rc.1 | default | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | :white_check_mark: | :x: | +| envoyproxy | envoy-gateway | v1.6.0-rc.1 | gateway-namespace-mode | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | +| istio | istio | 1.28 | default | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | +| kgateway-dev | kgateway | v2.1.0 | default | :white_check_mark: | :white_check_mark: | :x: | :x: | :x: | :x: | +| traefik | traefik | v3.6 | default | :white_check_mark: | :x: | :x: | :x: | :x: | :x: | + +## Mesh Profile + +### HTTPRoute + +| Organization | Project | Version | Mode | Core | Mesh Cluster IP Matching | Mesh HTTPRoute Backend Request Header Modification | Mesh HTTPRoute Named Route Rule | Mesh HTTPRoute Query Param Matching | Mesh HTTPRoute Redirect Path | Mesh HTTPRoute Redirect Port | Mesh HTTPRoute Rewrite Path | Mesh HTTPRoute Scheme Redirect | Mesh Consumer Route | +|:---------------|:----------|:-------------|:--------|:-------------------|:---------------------------|:-----------------------------------------------------|:----------------------------------|:--------------------------------------|:-------------------------------|:-------------------------------|:------------------------------|:---------------------------------|:----------------------| +| cilium | cilium | 1.19.0-pre.2 | default | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :x: | +| istio | istio | 1.28 | default | :white_check_mark: | :x: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: | \ No newline at end of file