Issues

• translateRateLimitClusterSettings perf

  envoyproxy/gateway#10450 · Filter by author zirain opened on Oct 29, 2026 · v1.10.0 Release
  

• Handle EnvoyExtensionPolicy translation errors consistently

  area/translator
  envoyproxy/gateway#10447 · Filter by author michalskalski opened on Oct 28, 2026 · v1.10.0 Release
  

• Wire BackendTrafficPolicy.circuitBreaker.maxConnections for UDPRoute

  kind/enhancement
  envoyproxy/gateway#10417 · Filter by author zhaohuabing opened on Oct 27, 2026

• Support UDP health checks in BackendTrafficPolicy for UDPRoute

  kind/enhancement
  envoyproxy/gateway#10416 · Filter by author zhaohuabing opened on Oct 27, 2026

• EnvoyProxy bootstrap is revalidated on every translation

  area/performance
  envoyproxy/gateway#10372 · Filter by author stillya opened on Oct 22, 2026
  2

  

• Inconsistent Group/Kind checks for HTTPRouteFilter extensionRef

  triage
  envoyproxy/gateway#10371 · Filter by author kkk777-7 opened on Oct 22, 2026
  1

  

• Improve HTTPRouteFilter status

  envoyproxy/gateway#10370 · Filter by author kkk777-7 opened on Oct 22, 2026
  1

  

• ProxyMetrics settings are silently dropped for ALS, ext-service, OIDC and dynamic-module clusters

  help wanted
  envoyproxy/gateway#10360 · Filter by author omkar619-dev opened on Oct 21, 2026
  3

• Thought about this more: a mixed L7 and L4 SecurityPolicy doesn't make the intent clear. I'd like to split the field so each listener type has its own rules:

  envoyproxy/gateway#10359 · Filter by author zhaohuabing opened on Oct 21, 2026

• Support negative response cost in global rate limits (per-client concurrency limits)

  triage
  envoyproxy/gateway#10338 · Filter by author jchanam opened on Oct 20, 2026
  1

• Status updates remove status conditions and entries written by other controllers

  area/providerkind/bug
  envoyproxy/gateway#10335 · Filter by author kkk777-7 opened on Oct 20, 2026 · Backlog
  2

  

• Route policy ancestors drop the parentRef's port, so parentRefs that differ only by port share one ancestor

  area/policykind/bug
  envoyproxy/gateway#10333 · Filter by author kkk777-7 opened on Oct 20, 2026
  1

  

• OIDC: Support authentication via JWT client_assertion from projected Kubernetes service account token

  kind/enhancementkind/feature
  envoyproxy/gateway#10332 · Filter by author denniskniep opened on Oct 19, 2026

• OIDC PAR Support

  kind/enhancementkind/feature
  envoyproxy/gateway#10331 · Filter by author denniskniep opened on Oct 19, 2026

• Support setting the JWT clock_skew_seconds tolerance from SecurityPolicy

  kind/enhancementkind/feature
  envoyproxy/gateway#10311 · Filter by author EdsonLuisVieira opened on Oct 16, 2026

• OIDC: let the nonce and code-verifier cookies use Path=/ so all OAuth2 cookies can carry the __Host- prefix

  envoyproxy/gateway#10310 · Filter by author peterekhator opened on Oct 16, 2026

• API: cleanup HTTP1 across CTP, BTP

  area/api
  envoyproxy/gateway#10308 · Filter by author guydc opened on Oct 16, 2026

• MergeBackends: hasClusterSettings may consider the xRoute type to allow further de-duping

  kind/enhancement
  envoyproxy/gateway#10307 · Filter by author guydc opened on Oct 16, 2026

• Move the alternate protocols cache filter to the upstream filter chain once Envoy supports it

  envoyproxy/gateway#10298 · Filter by author zhaohuabing opened on Oct 16, 2026
  

• Allow insecureSkipVerify with upstream HTTP/3 once Envoy honors ACCEPT_UNTRUSTED on QUIC

  envoyproxy/gateway#10297 · Filter by author zhaohuabing opened on Oct 16, 2026
  

• Use the alternate protocols cache filter's own alt-svc strip once Envoy supports it

  envoyproxy/gateway#10296 · Filter by author zhaohuabing opened on Oct 16, 2026
  

• HTTPRoute status.parents empty or stale on first create under parallel applies (EG v1.9.2, GKE, hostless HTTPS listener)

  triage
  envoyproxy/gateway#10294 · Filter by author sravula84 opened on Oct 16, 2026

• JWT: editing a SecurityPolicy returns 403 "Wrong requirement_name" on existing connections since v1.9.0

  area/translatorkind/bug
  envoyproxy/gateway#10288 · Filter by author kkk777-7 opened on Oct 15, 2026 · v1.10.0 Release
  3

  

• Mixed Service + custom backendRefs in one HTTPRoute rule lose traffic, and the outcome flips depending on MergeBackends

  area/xds-translatorkind/bug
  envoyproxy/gateway#10269 · Filter by author zirain opened on Oct 14, 2026
  3

  

• Support the new envoy 1.40 body size limit filter

  envoyproxy/gateway#10268 · Filter by author pmjacinto opened on Oct 14, 2026
  3