Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion conformance/reports/v1.1.0/airlock-microgateway/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,7 @@
| standard | [v4.5.0](https://github.com/airlock/microgateway/releases/tag/4.5.0) | default | [link](./standard-4.5.0-default-report.yaml) |
| standard | [v4.6.0](https://github.com/airlock/microgateway/releases/tag/4.6.0) | default | [link](./standard-4.6.0-default-report.yaml) |
| standard | [v4.7.0](https://github.com/airlock/microgateway/releases/tag/4.7.0) | default | [link](./standard-4.7.0-default-report.yaml) |
| standard | [v4.8.0](https://github.com/airlock/microgateway/releases/tag/4.8.0) | default | [link](./standard-4.8.0-default-report.yaml) |

## Reproduce

Expand All @@ -16,7 +17,7 @@ The Airlock Microgateway conformance report can be reproduced by following the s
> [!NOTE]
> The `HTTPRouteWeight` test fires 10 concurrent request to 3 backends totaling in 500 requests to assert a distribution that matches the configured weight.
> Please be aware that this test exceeds the <!-- markdown-link-check-disable --> [5 req/sec rate-limit](https://docs.airlock.com/microgateway/latest/?topic=MGW-00000056) <!-- markdown-link-check-enable --> enforced in the <!-- markdown-link-check-disable --> [community edition](https://www.airlock.com/en/secure-access-hub/components/microgateway/community-edition) <!-- markdown-link-check-enable -->, causing the test to fail.
> To successfully pass this test a <!-- markdown-link-check-disable --> [premium license](https://www.airlock.com/en/secure-access-hub/components/microgateway/premium-edition) <!-- markdown-link-check-enable --> is required.
> To successfully pass this test a <!-- markdown-link-check-disable --> [premium license](https://www.airlock.com/en/secure-access-hub/components/microgateway/premium-edition) <!-- markdown-link-check-enable --> is required.
>
> The Airlock Microgateway drops all request headers except for a well-known built-in standard and tracing headers list (e.g., Accept, Cookie, X-CSRF-TOKEN) to reduce the attack surface.
> Therefore, to run the conformance tests, a `ContentSecurityPolicy` with a `HeaderRewrites` (see [`conformance-report.yaml`](https://github.com/airlock/microgateway/tree/main/gateway-api/conformance/manifests/conformance-report.yaml)) is required to disable request header filtering for all `HTTPRoute` tests relying on the `MakeRequestAndExpectEventuallyConsistentResponse` assertion.
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,47 @@
apiVersion: gateway.networking.k8s.io/v1alpha1
date: "2025-11-26T14:35:21Z"
gatewayAPIChannel: standard
gatewayAPIVersion: v1.1.0
implementation:
contact:
- https://www.airlock.com/en/contact
organization: airlock
project: microgateway
url: https://github.com/airlock/microgateway
version: 4.8.0
kind: ConformanceReport
mode: default
profiles:
- core:
result: success
statistics:
Failed: 0
Passed: 33
Skipped: 0
extended:
result: success
statistics:
Failed: 0
Passed: 13
Skipped: 0
supportedFeatures:
- GatewayHTTPListenerIsolation
- GatewayPort8080
- HTTPRouteHostRewrite
- HTTPRouteMethodMatching
- HTTPRouteParentRefPort
- HTTPRoutePathRedirect
- HTTPRoutePathRewrite
- HTTPRoutePortRedirect
- HTTPRouteQueryParamMatching
- HTTPRouteResponseHeaderModification
- HTTPRouteSchemeRedirect
unsupportedFeatures:
- GatewayStaticAddresses
- HTTPRouteBackendRequestHeaderModification
- HTTPRouteBackendTimeout
- HTTPRouteRequestMirror
- HTTPRouteRequestMultipleMirrors
- HTTPRouteRequestTimeout
name: GATEWAY-HTTP
summary: Core tests succeeded. Extended tests succeeded.
3 changes: 2 additions & 1 deletion conformance/reports/v1.1.1/airlock-microgateway/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,7 @@
| standard | [v4.5.0](https://github.com/airlock/microgateway/releases/tag/4.5.0) | default | [link](./standard-4.5.0-default-report.yaml) |
| standard | [v4.6.0](https://github.com/airlock/microgateway/releases/tag/4.6.0) | default | [link](./standard-4.6.0-default-report.yaml) |
| standard | [v4.7.0](https://github.com/airlock/microgateway/releases/tag/4.7.0) | default | [link](./standard-4.7.0-default-report.yaml) |
| standard | [v4.8.0](https://github.com/airlock/microgateway/releases/tag/4.8.0) | default | [link](./standard-4.8.0-default-report.yaml) |

## Reproduce

Expand All @@ -15,7 +16,7 @@ The Airlock Microgateway conformance report can be reproduced by following the s
> [!NOTE]
> The `HTTPRouteWeight` test fires 10 concurrent request to 3 backends totaling in 500 requests to assert a distribution that matches the configured weight.
> Please be aware that this test exceeds the <!-- markdown-link-check-disable --> [5 req/sec rate-limit](https://docs.airlock.com/microgateway/latest/?topic=MGW-00000056) <!-- markdown-link-check-enable --> enforced in the <!-- markdown-link-check-disable --> [community edition](https://www.airlock.com/en/secure-access-hub/components/microgateway/community-edition) <!-- markdown-link-check-enable -->, causing the test to fail.
> To successfully pass this test a <!-- markdown-link-check-disable --> [premium license](https://www.airlock.com/en/secure-access-hub/components/microgateway/premium-edition) <!-- markdown-link-check-enable --> is required.
> To successfully pass this test a <!-- markdown-link-check-disable --> [premium license](https://www.airlock.com/en/secure-access-hub/components/microgateway/premium-edition) <!-- markdown-link-check-enable --> is required.
>
> The Airlock Microgateway drops all request headers except for a well-known built-in standard and tracing headers list (e.g., Accept, Cookie, X-CSRF-TOKEN) to reduce the attack surface.
> Therefore, to run the conformance tests, a `ContentSecurityPolicy` with a `HeaderRewrites` (see [`conformance-report.yaml`](https://github.com/airlock/microgateway/tree/main/gateway-api/conformance/manifests/conformance-report.yaml)) is required to disable request header filtering for all `HTTPRoute` tests relying on the `MakeRequestAndExpectEventuallyConsistentResponse` assertion.
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,47 @@
apiVersion: gateway.networking.k8s.io/v1alpha1
date: "2025-11-26T14:35:01Z"
gatewayAPIChannel: standard
gatewayAPIVersion: v1.1.1
implementation:
contact:
- https://www.airlock.com/en/contact
organization: airlock
project: microgateway
url: https://github.com/airlock/microgateway
version: 4.8.0
kind: ConformanceReport
mode: default
profiles:
- core:
result: success
statistics:
Failed: 0
Passed: 33
Skipped: 0
extended:
result: success
statistics:
Failed: 0
Passed: 13
Skipped: 0
supportedFeatures:
- GatewayHTTPListenerIsolation
- GatewayPort8080
- HTTPRouteHostRewrite
- HTTPRouteMethodMatching
- HTTPRouteParentRefPort
- HTTPRoutePathRedirect
- HTTPRoutePathRewrite
- HTTPRoutePortRedirect
- HTTPRouteQueryParamMatching
- HTTPRouteResponseHeaderModification
- HTTPRouteSchemeRedirect
unsupportedFeatures:
- GatewayStaticAddresses
- HTTPRouteBackendRequestHeaderModification
- HTTPRouteBackendTimeout
- HTTPRouteRequestMirror
- HTTPRouteRequestMultipleMirrors
- HTTPRouteRequestTimeout
name: GATEWAY-HTTP
summary: Core tests succeeded. Extended tests succeeded.
3 changes: 2 additions & 1 deletion conformance/reports/v1.2.0/airlock-microgateway/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,7 @@
| standard | [v4.5.0](https://github.com/airlock/microgateway/releases/tag/4.5.0) | default | [link](./standard-4.5.0-default-report.yaml) |
| standard | [v4.6.0](https://github.com/airlock/microgateway/releases/tag/4.6.0) | default | [link](./standard-4.6.0-default-report.yaml) |
| standard | [v4.7.0](https://github.com/airlock/microgateway/releases/tag/4.7.0) | default | [link](./standard-4.7.0-default-report.yaml) |
| standard | [v4.8.0](https://github.com/airlock/microgateway/releases/tag/4.8.0) | default | [link](./standard-4.8.0-default-report.yaml) |

## Reproduce

Expand All @@ -15,7 +16,7 @@ The Airlock Microgateway conformance report can be reproduced by following the s
> [!NOTE]
> The `HTTPRouteWeight` test fires 10 concurrent request to 3 backends totaling in 500 requests to assert a distribution that matches the configured weight.
> Please be aware that this test exceeds the <!-- markdown-link-check-disable --> [5 req/sec rate-limit](https://docs.airlock.com/microgateway/latest/?topic=MGW-00000056) <!-- markdown-link-check-enable --> enforced in the <!-- markdown-link-check-disable --> [community edition](https://www.airlock.com/en/secure-access-hub/components/microgateway/community-edition) <!-- markdown-link-check-enable -->, causing the test to fail.
> To successfully pass this test a <!-- markdown-link-check-disable --> [premium license](https://www.airlock.com/en/secure-access-hub/components/microgateway/premium-edition) <!-- markdown-link-check-enable --> is required.
> To successfully pass this test a <!-- markdown-link-check-disable --> [premium license](https://www.airlock.com/en/secure-access-hub/components/microgateway/premium-edition) <!-- markdown-link-check-enable --> is required.
>
> The Airlock Microgateway drops all request headers except for a well-known built-in standard and tracing headers list (e.g., Accept, Cookie, X-CSRF-TOKEN) to reduce the attack surface.
> Therefore, to run the conformance tests, a `ContentSecurityPolicy` with a `HeaderRewrites` (see [`conformance-report.yaml`](https://github.com/airlock/microgateway/tree/main/gateway-api/conformance/manifests/conformance-report.yaml)) is required to disable request header filtering for all `HTTPRoute` tests relying on the `MakeRequestAndExpectEventuallyConsistentResponse` assertion.
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,53 @@
apiVersion: gateway.networking.k8s.io/v1
date: "2025-11-26T14:35:34Z"
gatewayAPIChannel: standard
gatewayAPIVersion: v1.2.0
implementation:
contact:
- https://www.airlock.com/en/contact
organization: airlock
project: microgateway
url: https://github.com/airlock/microgateway
version: 4.8.0
kind: ConformanceReport
mode: default
profiles:
- core:
result: success
statistics:
Failed: 0
Passed: 33
Skipped: 0
extended:
result: success
statistics:
Failed: 0
Passed: 19
Skipped: 0
supportedFeatures:
- GatewayHTTPListenerIsolation
- GatewayInfrastructurePropagation
- GatewayPort8080
- HTTPRouteBackendProtocolH2C
- HTTPRouteBackendProtocolWebSocket
- HTTPRouteBackendTimeout
- HTTPRouteDestinationPortMatching
- HTTPRouteHostRewrite
- HTTPRouteMethodMatching
- HTTPRouteParentRefPort
- HTTPRoutePathRedirect
- HTTPRoutePathRewrite
- HTTPRoutePortRedirect
- HTTPRouteQueryParamMatching
- HTTPRouteRequestTimeout
- HTTPRouteResponseHeaderModification
- HTTPRouteSchemeRedirect
unsupportedFeatures:
- GatewayStaticAddresses
- HTTPRouteBackendRequestHeaderModification
- HTTPRouteRequestMirror
- HTTPRouteRequestMultipleMirrors
name: GATEWAY-HTTP
summary: Core tests succeeded. Extended tests succeeded.
succeededProvisionalTests:
- GatewayInfrastructure
3 changes: 2 additions & 1 deletion conformance/reports/v1.2.1/airlock-microgateway/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,7 @@
| experimental | [v4.5.0](https://github.com/airlock/microgateway/releases/tag/4.5.0) | default | [link](./experimental-4.5.0-default-report.yaml) |
| standard | [v4.6.0](https://github.com/airlock/microgateway/releases/tag/4.6.0) | default | [link](./standard-4.6.0-default-report.yaml) |
| standard | [v4.7.0](https://github.com/airlock/microgateway/releases/tag/4.7.0) | default | [link](./standard-4.7.0-default-report.yaml) |
| standard | [v4.8.0](https://github.com/airlock/microgateway/releases/tag/4.8.0) | default | [link](./standard-4.8.0-default-report.yaml) |

## Reproduce

Expand All @@ -15,7 +16,7 @@ The Airlock Microgateway conformance report can be reproduced by following the s
> [!NOTE]
> The `HTTPRouteWeight` test fires 10 concurrent request to 3 backends totaling in 500 requests to assert a distribution that matches the configured weight.
> Please be aware that this test exceeds the <!-- markdown-link-check-disable --> [5 req/sec rate-limit](https://docs.airlock.com/microgateway/latest/?topic=MGW-00000056) <!-- markdown-link-check-enable --> enforced in the <!-- markdown-link-check-disable --> [community edition](https://www.airlock.com/en/secure-access-hub/components/microgateway/community-edition) <!-- markdown-link-check-enable -->, causing the test to fail.
> To successfully pass this test a <!-- markdown-link-check-disable --> [premium license](https://www.airlock.com/en/secure-access-hub/components/microgateway/premium-edition) <!-- markdown-link-check-enable --> is required.
> To successfully pass this test a <!-- markdown-link-check-disable --> [premium license](https://www.airlock.com/en/secure-access-hub/components/microgateway/premium-edition) <!-- markdown-link-check-enable --> is required.
>
> The Airlock Microgateway drops all request headers except for a well-known built-in standard and tracing headers list (e.g., Accept, Cookie, X-CSRF-TOKEN) to reduce the attack surface.
> Therefore, to run the conformance tests, a `ContentSecurityPolicy` with a `HeaderRewrites` (see [`conformance-report.yaml`](https://github.com/airlock/microgateway/tree/main/gateway-api/conformance/manifests/conformance-report.yaml)) is required to disable request header filtering for all `HTTPRoute` tests relying on the `MakeRequestAndExpectEventuallyConsistentResponse` assertion.
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,53 @@
apiVersion: gateway.networking.k8s.io/v1
date: "2025-11-26T14:36:42Z"
gatewayAPIChannel: standard
gatewayAPIVersion: v1.2.1
implementation:
contact:
- https://www.airlock.com/en/contact
organization: airlock
project: microgateway
url: https://github.com/airlock/microgateway
version: 4.8.0
kind: ConformanceReport
mode: default
profiles:
- core:
result: success
statistics:
Failed: 0
Passed: 33
Skipped: 0
extended:
result: success
statistics:
Failed: 0
Passed: 19
Skipped: 0
supportedFeatures:
- GatewayHTTPListenerIsolation
- GatewayInfrastructurePropagation
- GatewayPort8080
- HTTPRouteBackendProtocolH2C
- HTTPRouteBackendProtocolWebSocket
- HTTPRouteBackendTimeout
- HTTPRouteDestinationPortMatching
- HTTPRouteHostRewrite
- HTTPRouteMethodMatching
- HTTPRouteParentRefPort
- HTTPRoutePathRedirect
- HTTPRoutePathRewrite
- HTTPRoutePortRedirect
- HTTPRouteQueryParamMatching
- HTTPRouteRequestTimeout
- HTTPRouteResponseHeaderModification
- HTTPRouteSchemeRedirect
unsupportedFeatures:
- GatewayStaticAddresses
- HTTPRouteBackendRequestHeaderModification
- HTTPRouteRequestMirror
- HTTPRouteRequestMultipleMirrors
name: GATEWAY-HTTP
summary: Core tests succeeded. Extended tests succeeded.
succeededProvisionalTests:
- GatewayInfrastructure
3 changes: 2 additions & 1 deletion conformance/reports/v1.3.0/airlock-microgateway/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,7 @@
|--------------|----------------------------------------------------------------------|---------|--------------------------------------------------|
| experimental | [v4.6.0](https://github.com/airlock/microgateway/releases/tag/4.6.0) | default | [link](./experimental-4.6.0-default-report.yaml) |
| experimental | [v4.7.0](https://github.com/airlock/microgateway/releases/tag/4.7.0) | default | [link](./experimental-4.7.0-default-report.yaml) |
| standard | [v4.8.0](https://github.com/airlock/microgateway/releases/tag/4.8.0) | default | [link](./standard-4.8.0-default-report.yaml) |

## Reproduce

Expand All @@ -14,7 +15,7 @@ The Airlock Microgateway conformance report can be reproduced by following the s
> [!NOTE]
> The `HTTPRouteWeight` test fires 10 concurrent request to 3 backends totaling in 500 requests to assert a distribution that matches the configured weight.
> Please be aware that this test exceeds the <!-- markdown-link-check-disable --> [5 req/sec rate-limit](https://docs.airlock.com/microgateway/latest/?topic=MGW-00000056) <!-- markdown-link-check-enable --> enforced in the <!-- markdown-link-check-disable --> [community edition](https://www.airlock.com/en/secure-access-hub/components/microgateway/community-edition) <!-- markdown-link-check-enable -->, causing the test to fail.
> To successfully pass this test a <!-- markdown-link-check-disable --> [premium license](https://www.airlock.com/en/secure-access-hub/components/microgateway/premium-edition) <!-- markdown-link-check-enable --> is required.
> To successfully pass this test a <!-- markdown-link-check-disable --> [premium license](https://www.airlock.com/en/secure-access-hub/components/microgateway/premium-edition) <!-- markdown-link-check-enable --> is required.
>
> The Airlock Microgateway drops all request headers except for a well-known built-in standard and tracing headers list (e.g., Accept, Cookie, X-CSRF-TOKEN) to reduce the attack surface.
> Therefore, to run the conformance tests, a `ContentSecurityPolicy` with a `HeaderRewrites` (see [`conformance-report.yaml`](https://github.com/airlock/microgateway/tree/main/gateway-api/conformance/manifests/conformance-report.yaml)) is required to disable request header filtering for all `HTTPRoute` tests relying on the `MakeRequestAndExpectEventuallyConsistentResponse` assertion.
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,55 @@
apiVersion: gateway.networking.k8s.io/v1
date: "2025-11-26T14:32:24Z"
gatewayAPIChannel: standard
gatewayAPIVersion: v1.3.0
implementation:
contact:
- https://www.airlock.com/en/contact
organization: airlock
project: microgateway
url: https://github.com/airlock/microgateway
version: 4.8.0
kind: ConformanceReport
mode: default
profiles:
- core:
result: success
statistics:
Failed: 0
Passed: 33
Skipped: 0
extended:
result: success
statistics:
Failed: 0
Passed: 19
Skipped: 0
supportedFeatures:
- GatewayHTTPListenerIsolation
- GatewayInfrastructurePropagation
- GatewayPort8080
- HTTPRouteBackendProtocolH2C
- HTTPRouteBackendProtocolWebSocket
- HTTPRouteBackendTimeout
- HTTPRouteDestinationPortMatching
- HTTPRouteHostRewrite
- HTTPRouteMethodMatching
- HTTPRouteParentRefPort
- HTTPRoutePathRedirect
- HTTPRoutePathRewrite
- HTTPRoutePortRedirect
- HTTPRouteQueryParamMatching
- HTTPRouteRequestTimeout
- HTTPRouteResponseHeaderModification
- HTTPRouteSchemeRedirect
unsupportedFeatures:
- GatewayAddressEmpty
- GatewayStaticAddresses
- HTTPRouteBackendRequestHeaderModification
- HTTPRouteRequestMirror
- HTTPRouteRequestMultipleMirrors
- HTTPRouteRequestPercentageMirror
name: GATEWAY-HTTP
summary: Core tests succeeded. Extended tests succeeded.
succeededProvisionalTests:
- GatewayInfrastructure
Loading