Repository navigation
[release-1.0] Cherry-pick #3442: docs: fix outdated statements in the egress guides - #3516
Merged
Lior Lieberman (LiorLieberman) merged 1 commit intoOct 31, 2026
Conversation
) `egress-credential-injection.md` - Injection also works on cleartext `http` rules. - Credential URIs: list the form the API accepts and what admission rejects. - The provider setting can also come from `ATE_CREDENTIAL_PROVIDER` or from `atenet.egress.credentialProvider` in the `--config` file. - The `ext-proc` log command works on the Envoy dataplane only. - Use `replaceHeaders` throughout, to match the examples. `egress-trust-bundle.md` - The example was a CRD-shaped manifest that `kubectl ate create actor-template -f` rejects, and its trailing-slash `mountPath` fails validation. It is now a protojson excerpt. - The `unusable contents` error does not exist. The doc now shows the error atelet returns when the egress ClusterTrustBundle is missing. - The wrapper script now reads the same path as the example. - System roots come from atelet's `distroless/base-debian13` image. `egress-traffic.md` - HTTPS whose SNI matches no rule is closed during the TLS handshake, without an HTTP response. - Add a row for `tls_passthrough`. It relays whatever runs inside the TLS without inspecting it. - A client that sends non-HTTP bytes first gets `400 Bad Request`. A client that waits for the server is closed after about 1 second. atunnel does not log either case. AI use: I used Claude Code to audit the egress docs against the code, run a test for all the outdated statement. I reviewed every change. - [ ] Tests pass - [x] Docs updated --------- Signed-off-by: Yufan Su <yufans@google.com> (cherry picked from commit 0e67fd6)
Lior Lieberman (LiorLieberman)
approved these changes
Oct 31, 2026
Lior Lieberman (LiorLieberman)
merged commit Oct 31, 2026
b842548
into
agent-substrate:release-1.0
9 checks passed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Cherry-pick of #3442 onto
release-1.0(git cherry-pick -xof the squash commit), it applied cleanly with no changes.Fixes outdated statements in the egress credential injection, traffic and trust bundle guides.
AI use: AI-assisted. Clean pick.