[CONNECT-2945] Update the protos as part of envoy bump to 1.37.5 - #20
Merged
Conversation
|
Comment
You can also request review from a specific team by commenting 💡 If you see something that doesn't look right, check the configuration guide. |
ingride-wise
changed the title
There was a problem hiding this comment.
Pull request overview
Changes: Maintenance (1)
This PR updates the pinned Envoy upstream revision and syncs the generated API surface in this repository to match Envoy 1.37.5, including new/updated Envoy, xDS, OpenTelemetry, and CEL proto definitions.
Changes:
- Bump Envoy version metadata (SHA + published artifact version) to 1.37.5.
- Sync a large set of protobuf API files to the Envoy 1.37.5 upstream state (including new APIs and doc updates).
- Introduce additional new proto packages/types that appear in the 1.37.5 API set (e.g., matching inputs, cache_v2, dynamic_modules, reverse tunnel/connection, etc.).
Reviewed changes
Copilot reviewed 147 out of 147 changed files in this pull request and generated 3 comments.
Show a summary per file
| File | Description |
|---|---|
| tools/API_SHAS | Update pinned Envoy SHA and dependency versions used for API sync. |
| gradle.properties | Bump published artifact version to 1.37.5-1. |
| src/main/proto/opentelemetry/proto/trace/v1/trace.proto | Sync OpenTelemetry trace proto comments/semantics to newer upstream. |
| src/main/proto/opentelemetry/proto/resource/v1/resource.proto | Sync OpenTelemetry resource proto comments. |
| src/main/proto/opentelemetry/proto/logs/v1/logs.proto | Sync OpenTelemetry logs proto comments. |
| src/main/proto/opentelemetry/proto/common/v1/common.proto | Sync OpenTelemetry common proto comments/fields. |
| src/main/proto/envoy/type/tracing/v3/custom_tag.proto | Add/update fields for custom tag value support. |
| src/main/proto/envoy/type/matcher/value.proto | Documentation update for Value matcher wording. |
| src/main/proto/envoy/type/matcher/v3/value.proto | Documentation update for Value matcher wording. |
| src/main/proto/envoy/service/auth/v3/external_auth.proto | Extend CheckResponse with error_response support. |
| src/main/proto/envoy/extensions/upstreams/http/v3/http_protocol_options.proto | Add outlier detection + mirroring/hash/retry policies for upstream HTTP options. |
| src/main/proto/envoy/extensions/transport_sockets/tls/v3/tls.proto | Add extension-category annotation for certificate selectors. |
| src/main/proto/envoy/extensions/transport_sockets/tls/cert_selectors/on_demand_secret/v3/config.proto | New proto: on-demand secret certificate selector config. |
| src/main/proto/envoy/extensions/transport_sockets/tls/cert_mappers/static_name/v3/config.proto | New proto: static secret name certificate mapper. |
| src/main/proto/envoy/extensions/transport_sockets/tls/cert_mappers/sni/v3/config.proto | New proto: SNI certificate mapper. |
| src/main/proto/envoy/extensions/transport_sockets/quic/v3/quic_transport.proto | Doc/annotation updates for QUIC transport socket. |
| src/main/proto/envoy/extensions/stat_sinks/open_telemetry/v3/open_telemetry.proto | Extend OTLP stat sink with resource detectors and custom metric conversions. |
| src/main/proto/envoy/extensions/quic/connection_id_generator/quic_lb/v3/quic_lb.proto | Update QUIC LB config fields and documentation. |
| src/main/proto/envoy/extensions/quic/client_writer_factory/v3/default_client_writer.proto | New proto: default QUIC client packet writer extension config. |
| src/main/proto/envoy/extensions/network/dns_resolver/cares/v3/cares_dns_resolver.proto | Add EDNS0 and UDP channel refresh options to c-ares resolver config. |
| src/main/proto/envoy/extensions/matching/common_inputs/transport_socket/v3/transport_socket_inputs.proto | New proto: transport socket matcher inputs/actions. |
| src/main/proto/envoy/extensions/matching/common_inputs/stats/v3/stats.proto | New proto: stats matcher input type. |
| src/main/proto/envoy/extensions/matching/common_inputs/network/v3/network_inputs.proto | Add NetworkNamespaceInput matcher input. |
| src/main/proto/envoy/extensions/local_address_selectors/filter_state_override/v3/config.proto | New proto: local address selector filter-state override extension config. |
| src/main/proto/envoy/extensions/load_balancing_policies/wrr_locality/v3/wrr_locality.proto | Enable extension annotation for wrr_locality policy. |
| src/main/proto/envoy/extensions/load_balancing_policies/random_subsetting/v3/random_subsetting.proto | New proto: random subsetting LB policy config. |
| src/main/proto/envoy/extensions/load_balancing_policies/common/v3/common.proto | Add LocalityBasis option for zone-aware routing config. |
| src/main/proto/envoy/extensions/load_balancing_policies/client_side_weighted_round_robin/v3/client_side_weighted_round_robin.proto | Add slow start config reference to LB policy. |
| src/main/proto/envoy/extensions/http/original_ip_detection/xff/v3/xff.proto | Add warning doc about private IP handling changes. |
| src/main/proto/envoy/extensions/http/injected_credentials/oauth2/v3/oauth2.proto | Add endpoint_params support for OAuth2 injected-credentials filter. |
| src/main/proto/envoy/extensions/http/injected_credentials/generic/v3/generic.proto | Add header_value_prefix support for injected credentials. |
| src/main/proto/envoy/extensions/http/ext_proc/processing_request_modifiers/mapped_attribute_builder/v3/mapped_attribute_builder.proto | New proto: ext_proc mapped attribute builder config. |
| src/main/proto/envoy/extensions/http/cache_v2/simple_http_cache/v3/config.proto | New proto: cache_v2 simple storage plugin config. |
| src/main/proto/envoy/extensions/grpc_service/channel_credentials/xds/v3/xds_credentials.proto | New proto: gRPC xDS channel credentials config. |
| src/main/proto/envoy/extensions/grpc_service/channel_credentials/tls/v3/tls_credentials.proto | New proto: gRPC TLS channel credentials config. |
| src/main/proto/envoy/extensions/grpc_service/channel_credentials/local/v3/local_credentials.proto | New proto: gRPC local channel credentials config. |
| src/main/proto/envoy/extensions/grpc_service/channel_credentials/insecure/v3/insecure_credentials.proto | New proto: gRPC insecure channel credentials config. |
| src/main/proto/envoy/extensions/grpc_service/channel_credentials/google_default/v3/google_default_credentials.proto | New proto: gRPC google_default channel credentials config. |
| src/main/proto/envoy/extensions/grpc_service/call_credentials/sts_service/v3/sts_service_credentials.proto | New proto: STS call credentials config. |
| src/main/proto/envoy/extensions/grpc_service/call_credentials/service_account_jwt_access/v3/service_account_jwt_access_credentials.proto | New proto: service account JWT access call credentials config. |
| src/main/proto/envoy/extensions/grpc_service/call_credentials/google_refresh_token/v3/google_refresh_token_credentials.proto | New proto: refresh token call credentials config. |
| src/main/proto/envoy/extensions/grpc_service/call_credentials/google_iam/v3/google_iam_credentials.proto | New proto: IAM call credentials config. |
| src/main/proto/envoy/extensions/grpc_service/call_credentials/google_compute_engine/v3/google_compute_engine_credentials.proto | New proto: GCE call credentials config. |
| src/main/proto/envoy/extensions/grpc_service/call_credentials/file_based_metadata/v3/file_based_metadata_credentials.proto | New proto: file-based metadata call credentials config. |
| src/main/proto/envoy/extensions/grpc_service/call_credentials/access_token/v3/access_token_credentials.proto | New proto: access token call credentials config. |
| src/main/proto/envoy/extensions/geoip_providers/maxmind/v3/maxmind.proto | Add country_db_path support and improve MaxMind docs. |
| src/main/proto/envoy/extensions/formatter/metadata/v3/metadata.proto | Add LISTENER_FILTER_CHAIN in formatter metadata enum docs. |
| src/main/proto/envoy/extensions/formatter/cel/v3/cel.proto | Document typed CEL formatter variant for structured formats. |
| src/main/proto/envoy/extensions/filters/udp/dynamic_modules/v3/dynamic_modules.proto | New proto: dynamic modules UDP listener filter config. |
| src/main/proto/envoy/extensions/filters/udp/dns_filter/v3/dns_filter.proto | Add DNS filter access_log support and clarify client resolver behavior. |
| src/main/proto/envoy/extensions/filters/network/set_filter_state/v3/set_filter_state.proto | Add on_downstream_tls_handshake filter-state application list. |
| src/main/proto/envoy/extensions/filters/network/reverse_tunnel/v3/reverse_tunnel.proto | New proto: reverse tunnel network filter config. |
| src/main/proto/envoy/extensions/filters/network/redis_proxy/v3/redis_proxy.proto | Add per-address Redis credentials support. |
| src/main/proto/envoy/extensions/filters/network/rbac/v3/rbac.proto | Update matcher field annotations and remove WIP markers. |
| src/main/proto/envoy/extensions/filters/network/geoip/v3/geoip.proto | New proto: network geoip filter config. |
| src/main/proto/envoy/extensions/filters/network/ext_proc/v3/ext_proc.proto | Remove not-implemented markers and align docs. |
| src/main/proto/envoy/extensions/filters/network/ext_authz/v3/ext_authz.proto | Add TLS denial alert + metadata namespace forwarding options. |
| src/main/proto/envoy/extensions/filters/network/dynamic_modules/v3/dynamic_modules.proto | New proto: dynamic modules network filter config. |
| src/main/proto/envoy/extensions/filters/listener/tls_inspector/v3/tls_inspector.proto | Add max_client_hello_size and update buffering docs. |
| src/main/proto/envoy/extensions/filters/listener/proxy_protocol/v3/proxy_protocol.proto | Add tlv_location option to control TLV storage location. |
| src/main/proto/envoy/extensions/filters/listener/dynamic_modules/v3/dynamic_modules.proto | New proto: dynamic modules listener filter config. |
| src/main/proto/envoy/extensions/filters/http/transform/v3/transform.proto | New proto: transform HTTP filter configuration. |
| src/main/proto/envoy/extensions/filters/http/thrift_to_metadata/v3/thrift_to_metadata.proto | Update field selector precedence docs and remove WIP markers. |
| src/main/proto/envoy/extensions/filters/http/tap/v3/tap.proto | Add record_upstream_connection option. |
| src/main/proto/envoy/extensions/filters/http/stateful_session/v3/stateful_session.proto | Add optional stat_prefix support. |
| src/main/proto/envoy/extensions/filters/http/router/v3/router.proto | Add reject_connect_request_early_data option. |
| src/main/proto/envoy/extensions/filters/http/rbac/v3/rbac.proto | Update matcher field annotations and remove WIP markers. |
| src/main/proto/envoy/extensions/filters/http/ratelimit/v3/rate_limit.proto | Add rate_limits override list + clarify precedence docs. |
| src/main/proto/envoy/extensions/filters/http/proto_message_extraction/v3/config.proto | Add EXTRACT_REPEATED_CARDINALITY extract directive. |
| src/main/proto/envoy/extensions/filters/http/proto_api_scrubber/v3/matcher_actions.proto | Remove WIP markers/imports for scrubber matcher actions. |
| src/main/proto/envoy/extensions/filters/http/proto_api_scrubber/v3/config.proto | Add message/method restriction support and update docs. |
| src/main/proto/envoy/extensions/filters/http/on_demand/v3/on_demand.proto | Remove validate requirement on source field (upstream sync). |
| src/main/proto/envoy/extensions/filters/http/oauth2/v3/oauth.proto | Add cookie path + partitioned support; add cookie_domain validation; add disable_token_encryption. |
| src/main/proto/envoy/extensions/filters/http/mcp/v3/mcp.proto | New proto: MCP HTTP filter config and per-route override. |
| src/main/proto/envoy/extensions/filters/http/mcp_router/v3/mcp_router.proto | New proto: MCP router (mux/demux) terminal HTTP filter config. |
| src/main/proto/envoy/extensions/filters/http/jwt_authn/v3/config.proto | Add extract_only_without_validation requirement mode and docs. |
| src/main/proto/envoy/extensions/filters/http/header_to_metadata/v3/header_to_metadata.proto | Doc clarifications + add stat_prefix option. |
| src/main/proto/envoy/extensions/filters/http/geoip/v3/geoip.proto | Add custom_header_config client IP extraction option. |
| src/main/proto/envoy/extensions/filters/http/ext_proc/v3/processing_mode.proto | Doc improvements and add GRPC processing mode (hidden). |
| src/main/proto/envoy/extensions/filters/http/composite/v3/composite.proto | Add named filter chains and additional execute action config options. |
| src/main/proto/envoy/extensions/filters/http/cache_v2/v3/cache.proto | New proto: HTTP cache_v2 filter config. |
| src/main/proto/envoy/extensions/filters/http/aws_request_signing/v3/aws_request_signing.proto | Doc improvements + add match_included_headers support. |
| src/main/proto/envoy/extensions/filters/http/aws_lambda/v3/aws_lambda.proto | Doc formatting improvements for host rewrite behavior. |
| src/main/proto/envoy/extensions/filters/common/set_filter_state/v3/value.proto | Expand documentation for object_key/factory_key semantics. |
| src/main/proto/envoy/extensions/dynamic_modules/v3/dynamic_modules.proto | Doc and behavior clarifications for dynamic module config options. |
| src/main/proto/envoy/extensions/common/aws/v3/credential_provider.proto | Update docs for web identity watching + role session name behavior. |
| src/main/proto/envoy/extensions/clusters/reverse_connection/v3/reverse_connection.proto | New proto: reverse connection cluster type config. |
| src/main/proto/envoy/extensions/clusters/composite/v3/cluster.proto | New proto: composite cluster type config. |
| src/main/proto/envoy/extensions/bootstrap/reverse_tunnel/upstream_socket_interface/v3/upstream_reverse_connection_socket_interface.proto | New proto: upstream reverse tunnel socket interface bootstrap config. |
| src/main/proto/envoy/extensions/bootstrap/reverse_tunnel/downstream_socket_interface/v3/downstream_reverse_connection_socket_interface.proto | New proto: downstream reverse tunnel socket interface bootstrap config. |
| src/main/proto/envoy/extensions/bootstrap/dynamic_modules/v3/dynamic_modules.proto | New proto: dynamic modules bootstrap extension config. |
| src/main/proto/envoy/extensions/access_loggers/stats/v3/stats.proto | New proto: stats-emitting access logger config. |
| src/main/proto/envoy/extensions/access_loggers/open_telemetry/v3/logs_service.proto | Extend OTLP access log config with HTTP transport and buffering options. |
| src/main/proto/envoy/extensions/access_loggers/filters/process_ratelimit/v3/process_ratelimit.proto | New proto: process-wide access log rate limit filter config. |
| src/main/proto/envoy/extensions/access_loggers/filters/cel/v3/cel.proto | Add CelExpressionConfig support for access log filter expressions. |
| src/main/proto/envoy/extensions/access_loggers/dynamic_modules/v3/dynamic_modules.proto | New proto: dynamic modules access logger config. |
| src/main/proto/envoy/data/tap/v3/transport.proto | Add seq_num to socket tap events. |
| src/main/proto/envoy/data/tap/v3/http.proto | Add upstream_connection to HTTP buffered trace. |
| src/main/proto/envoy/data/core/v3/tlv_metadata.proto | Update proxy protocol typed metadata documentation. |
| src/main/proto/envoy/config/route/v3/route.proto | Add vhost_header option and improve ignore_port note. |
| src/main/proto/envoy/config/rbac/v3/rbac.proto | Add CelExpressionConfig support to RBAC Policy. |
| src/main/proto/envoy/config/overload/v3/overload.proto | Add HTTP downstream stream flush timer scaling + expand overload action docs. |
| src/main/proto/envoy/config/metrics/v3/stats.proto | Add bins option and adjust docs/validation in histogram bucket settings. |
| src/main/proto/envoy/config/metrics/v3/metrics_service.proto | Add batch_size option for gRPC metrics batching. |
| src/main/proto/envoy/config/listener/v3/quic_config.proto | Add max_sessions_per_event_loop to QUIC listener options. |
| src/main/proto/envoy/config/listener/v3/listener.proto | Add per-address tcp_keepalive config + docs updates; remove WIP markers. |
| src/main/proto/envoy/config/listener/v3/listener_components.proto | Remove not-implemented hide for filter chain metadata + doc formatting. |
| src/main/proto/envoy/config/endpoint/v3/load_report.proto | Clarify “request” semantics include TCP connection pools. |
| src/main/proto/envoy/config/core/v3/proxy_protocol.proto | Add dynamic TLV format_string support and clarify precedence docs. |
| src/main/proto/envoy/config/core/v3/health_check.proto | Clarify payload support for HTTP health checks + method constraints. |
| src/main/proto/envoy/config/core/v3/grpc_service.proto | Docs + new plugin fields for GoogleGrpc credentials; clarify retry policy semantics. |
| src/main/proto/envoy/config/core/v3/config_source.proto | Clarify meaning of ExtensionConfigSource.type_urls. |
| src/main/proto/envoy/config/core/v3/cel.proto | New proto: CEL expression evaluation configuration options. |
| src/main/proto/envoy/config/core/v3/address.proto | Update tcp keepalive docs; refine network namespace note. |
| src/main/proto/envoy/config/common/mutation_rules/v3/mutation_rules.proto | Add RemoveOnMatch header mutation action. |
| src/main/proto/envoy/config/cluster/v3/cluster.proto | Add transport_socket_matcher support and related docs/imports. |
| src/main/proto/envoy/config/accesslog/v3/accesslog.proto | Add NE comparison operator. |
| src/main/proto/envoy/admin/v3/server_info.proto | Add file_flush_min_size to command line options. |
| src/main/proto/contrib/envoy/extensions/network/connection_balance/dlb/v3alpha/dlb.proto | Add not-implemented-hide + doc note about extension being disabled upstream. |
| src/main/proto/contrib/envoy/extensions/load_balancing_policies/peak_ewma/v3alpha/peak_ewma.proto | New proto: contrib Peak EWMA LB policy config. |
| src/main/proto/contrib/envoy/extensions/filters/network/metadata_exchange/v3/metadata_exchange.proto | New proto: metadata exchange network filter config. |
| src/main/proto/contrib/envoy/extensions/filters/listener/postgres_inspector/v3alpha/postgres_inspector.proto | New proto: postgres inspector listener filter config + metadata type. |
| src/main/proto/contrib/envoy/extensions/filters/http/peer_metadata/v3/peer_metadata.proto | New proto: peer metadata HTTP filter config. |
| src/main/proto/contrib/envoy/extensions/filters/http/peak_ewma/v3alpha/peak_ewma.proto | New proto: Peak EWMA HTTP timing filter config. |
| src/main/proto/contrib/envoy/extensions/filters/http/istio_stats/v3/istio_stats.proto | New proto: Istio stats HTTP filter config. |
| src/main/proto/contrib/envoy/extensions/filters/http/alpn/v3/alpn.proto | New proto: Istio ALPN HTTP filter config. |
| src/main/proto/contrib/envoy/extensions/filters/common/workload_discovery/v3/extension.proto | New proto: Istio workload discovery bootstrap extension config. |
| src/main/proto/cel/policy/policy.proto | New proto: CEL policy specification schema. |
| src/main/proto/cel/expr/conformance/proto3/test_all_types.proto | Update CEL conformance test protos with additional field names. |
| src/main/proto/cel/expr/conformance/proto2/test_all_types.proto | Update CEL conformance test protos with additional field names. |
| src/main/proto/cel/expr/conformance/conformance_service.proto | Replace google.rpc.Status issues with cel.expr.ErrorSet and update references. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
niting3c
approved these changes
Jul 29, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Context
Part of upgrading envoy to 1.37.5
Checklist