[pull] main from envoyproxy:main

.github/codecov.yml

@@ -5,3 +5,8 @@ coverage:
         target: 60%
         threshold: 5%
         if_ci_failed: error
+    patch:
+      default:
+        target: 60%
+        threshold: 5%
+        if_ci_failed: error

.github/dependabot.yml

@@ -13,20 +13,28 @@ updates:
     directory: /
     schedule:
       interval: weekly
+    groups:
+      k8s.io:
+        patterns:
+          - "k8s.io/*"
   - package-ecosystem: pip
     directory: /tools/src/codespell
     schedule:
       interval: weekly
   - package-ecosystem: gomod
-    directory: /tools/src/golangci-lint
+    directory: /tools/src/helm-docs
     schedule:
       interval: weekly
   - package-ecosystem: gomod
-    directory: /tools/src/kind
+    directory: /tools/src/buf
     schedule:
       interval: weekly
   - package-ecosystem: gomod
-    directory: /tools/src/kustomize
+    directory: /tools/src/golangci-lint
+    schedule:
+      interval: weekly
+  - package-ecosystem: gomod
+    directory: /tools/src/kind
     schedule:
       interval: weekly
   - package-ecosystem: gomod

.github/workflows/build_and_test.yaml

@@ -16,7 +16,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - uses: ./tools/github-actions/setup-deps
     # Generate the install manifests first so it can checked
     # for errors while running `make -k lint`
@@ -25,23 +25,23 @@ jobs:
     - run: make -k lint
 
   gen-check:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - uses: ./tools/github-actions/setup-deps
     - run: make -k gen-check
 
   license-check:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - uses: ./tools/github-actions/setup-deps
     - run: make -k licensecheck
 
   coverage-test:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - uses: ./tools/github-actions/setup-deps
 
     # test
@@ -59,7 +59,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [lint, gen-check, license-check, coverage-test]
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - uses: ./tools/github-actions/setup-deps
 
     - name: Build EG Multiarch Binaries
@@ -76,9 +76,9 @@ jobs:
     needs: [build]
     strategy:
       matrix:
-        version: [ v1.25.8, v1.26.3, v1.27.0 ]
+        version: [ v1.26.6, v1.27.3, v1.28.0 ]
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - uses: ./tools/github-actions/setup-deps
 
     - name: Download EG Binaries
@@ -93,7 +93,7 @@ jobs:
         chmod +x bin/linux/arm64/envoy-gateway
 
     # conformance
-    - name: Run Conformance Tests
+    - name: Run Standard Conformance Tests
       env:
         KIND_NODE_TAG: ${{ matrix.version }}
         IMAGE_PULL_POLICY: IfNotPresent
@@ -104,9 +104,9 @@ jobs:
     needs: [build]
     strategy:
       matrix:
-        version: [ v1.25.8, v1.26.3, v1.27.0 ]
+        version: [ v1.26.6, v1.27.3, v1.28.0 ]
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - uses: ./tools/github-actions/setup-deps
 
     - name: Download EG Binaries
@@ -131,7 +131,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [conformance-test, e2e-test]
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - uses: ./tools/github-actions/setup-deps
 
     - name: Download EG Binaries
@@ -148,7 +148,7 @@ jobs:
     # build and push image
     - name: Login to DockerHub
       if: github.event_name == 'push'
-      uses: docker/login-action@v2
+      uses: docker/login-action@v3
       with:
         username: ${{ secrets.DOCKERHUB_USERNAME }}
         password: ${{ secrets.DOCKERHUB_PASSWORD }}

.github/workflows/cherrypick.yaml

@@ -7,12 +7,12 @@ on:
 
 jobs:
   cherry_pick_release_v0_5:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     name: Cherry pick into release-v0.5
     if: ${{ contains(github.event.pull_request.labels.*.name, 'cherrypick/release-v0.5') && github.event.pull_request.merged == true }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Cherry pick into release/v0.5

.github/workflows/docs.yaml

@@ -1,47 +1,103 @@
-name: Docs
+name: Hugo Docs
 on:
   push:
     branches:
-      - "main"
-    paths-ignore:
-      - "**/*.png"
-  pull_request:
-    branches:
-      - "main"
-    paths-ignore:
-      - "**/*.png"
+    - "main"
+    - "release/v*"
+    paths:
+    - 'site/**'
+  pull_request_target:
+    types: [opened, synchronize, reopened]
+    paths:
+    - 'site/**'
 
 jobs:
   docs-lint:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
-      - name: Check out code
-        uses: actions/checkout@v3
+    - name: Check out code
+      uses: actions/checkout@v4
+      with:
+        ref: ${{ github.event.pull_request.head.sha }}
 
-      - name: Run markdown linter
-        uses: nosborn/[email protected]
-        with:
-          files: docs/*
-          config_file: ".github/markdown_lint_config.json"
+    - name: Run markdown linter
+      uses: nosborn/[email protected]
+      with:
+        files: site/content/*
+        config_file: ".github/markdown_lint_config.json"
 
   docs-build:
     runs-on: ubuntu-latest
     needs: docs-lint
+    permissions:
+      contents: write
     steps:
-      - uses: actions/checkout@v3
-      - uses: ./tools/github-actions/setup-deps
+    - name: Git checkout
+      uses: actions/checkout@v4
+      with:
+        submodules: true
+        ref: ${{ github.event.pull_request.head.sha }}
+
+    - name: Setup Hugo
+      uses: peaceiris/actions-hugo@v2
+      with:
+        hugo-version: 'latest'
+        extended: true
 
-      - name: Generate EG Pages
-        run: make docs
+    - name: Setup Node
+      uses: actions/setup-node@v4
+      with:
+        node-version: '18'
 
-      # Upload docs for GitHub Pages
-      - name: Upload GitHub Pages artifact
-        uses: actions/[email protected]
-        with:
-          # Path of the directory containing the static assets.
-          path: docs/html
-          # Duration after which artifact will expire in days.
-          # retention-days: # optional, default is 1
+    - name: Install Site Dependencies and Build Site
+      run: make docs
+
+    # Upload docs for GitHub Pages
+    - name: Upload GitHub Pages artifact
+      uses: actions/[email protected]
+      with:
+        # Path of the directory containing the static assets.
+        path: site/public
+        # Duration after which artifact will expire in days.
+        # retention-days: # optional, default is 1
+
+  docs-preview:
+    if: "github.event_name == 'pull_request_target'"
+    needs: docs-build
+    runs-on: ubuntu-22.04
+    steps:
+    - name: Git checkout
+      uses: actions/checkout@v4
+      with:
+        ref: ${{ github.event.pull_request.head.sha }}
+    - name: Setup Hugo
+      uses: peaceiris/actions-hugo@v2
+      with:
+        hugo-version: 'latest'
+        extended: true
+    - name: Setup Node
+      uses: actions/setup-node@v4
+      with:
+        node-version: '18'
+    - name: Install Site Dependencies and Build Site
+      run: make docs
+    - name: Deploy to Netlify
+      uses: nwtgck/[email protected]
+      with:
+        publish-dir: 'site/public'
+        production-deploy: false
+        github-token: ${{ secrets.GITHUB_TOKEN }}
+        deploy-message: "Deploy from GitHub Actions"
+        alias: "${{ github.event.repository.name }}-pr-${{ github.event.pull_request.number }}-preview"
+        # these all default to 'true'
+        enable-pull-request-comment: true
+        enable-commit-comment: false
+        enable-commit-status: true
+        overwrites-pull-request-comment: true
+      env:
+        NETLIFY_AUTH_TOKEN: ${{ secrets.NETLIFY_AUTH_TOKEN }}
+        NETLIFY_SITE_ID: ${{ secrets.NETLIFY_SITE_ID }}
+      timeout-minutes: 1
 
   # This workflow contains a single job called "build"
   docs-publish:
@@ -61,6 +117,6 @@ jobs:
       url: ${{ steps.deployment.outputs.page_url }}
 
     steps:
-      - name: Deploy to GitHub Pages
-        id: deployment
-        uses: actions/deploy-pages@v2.0.3
+    - name: Deploy to GitHub Pages
+      id: deployment
+      uses: actions/deploy-pages@v3.0.1

.github/workflows/experimental_conformance.yaml

@@ -0,0 +1,35 @@
+name: Experimental Conformance Test
+on:
+  push:
+    paths:
+    - 'charts/gateway-helm/crds/gatewayapi-crds.yaml'
+  pull_request:
+    paths:
+    - 'charts/gateway-helm/crds/gatewayapi-crds.yaml'
+    - 'test/conformance/*.go'
+  # Add workflow_dispatch to trigger this workflow manually by maintainers.
+  workflow_dispatch:
+
+jobs:
+  experimental-conformance-test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        version: [ v1.26.6, v1.27.3, v1.28.0 ]
+    steps:
+    - uses: actions/checkout@v4
+    - uses: ./tools/github-actions/setup-deps
+
+    # gateway api experimental conformance
+    - name: Run Experimental Conformance Tests
+      env:
+        CONFORMANCE_REPORT_PATH: conformance-report-k8s-${{ matrix.version }}.yaml
+        KIND_NODE_TAG: ${{ matrix.version }}
+        IMAGE_PULL_POLICY: IfNotPresent
+      run: make experimental-conformance
+
+    - name: Upload Conformance Report
+      uses: actions/upload-artifact@v3
+      with:
+        name: conformance-report-k8s-${{ matrix.version }}
+        path: ./test/conformance/conformance-report-k8s-${{ matrix.version }}.yaml

.github/workflows/latest_release.yaml

@@ -9,9 +9,10 @@ on:
 
 jobs:
   latest-release:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
+    - uses: ./tools/github-actions/setup-deps
 
     - name: Generate Release Manifests
       run: make generate-manifests IMAGE=envoyproxy/gateway-dev TAG=latest OUTPUT_DIR=release-artifacts

.github/workflows/release.yaml

@@ -7,9 +7,9 @@ on:
       - "v*.*.*"
 jobs:
   release:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Extract Release Tag and Commit SHA
         id: vars
@@ -19,7 +19,7 @@ jobs:
           echo "sha_short=$(git rev-parse --short HEAD)" >> $GITHUB_ENV
 
       - name: Login to DockerHub
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_PASSWORD }}

.github/workflows/retest.yaml

@@ -22,6 +22,6 @@ jobs:
       pull-requests: write
       actions: write
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/retest@actions-v0.0.10
+    - uses: envoyproxy/toolshed/gh-actions/retest@actions-v0.2.17
       with:
         token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/stale.yml

@@ -9,13 +9,13 @@ jobs:
       issues: write  # for actions/stale to close stale issues
       pull-requests: write  # for actions/stale to close stale PRs
     name: Prune Stale
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     # do not run it in forked repos
     if: github.repository == 'envoyproxy/gateway'
 
     steps:
     - name: Prune Stale
-      uses: actions/stale@v8
+      uses: actions/stale@v9
       with:
         repo-token: ${{ secrets.GITHUB_TOKEN }}
         # Different amounts of days for issues/PRs are not currently supported but there is a PR