johnlanni
8e426a5e99
feat: add higress-deep-troubleshooting skill
...
Distill the investigation methodology used in #4034 (Wasm CPU-spin root
cause across envoy + proxy-wasm-cpp-host forks) into a reusable skill
that future investigations can pick up and extend.
Structure:
- SKILL.md: entry point with trigger description and code map
- references/: investigation methodology + code-trace verification rules
- patterns/: accumulating case-study library; first entry is the #4034
drain-to-local fix (covers both CPU-spin and #326 stage-mismatch)
- templates/: investigation report + state-trace table formats
The patterns/ directory is the living part — each major investigation
adds a pattern capturing the technical root cause plus meta-lessons
(what tripped up the first analysis round, what the maintainer caught,
what generalizes).
Origin: #4034 / #4064 issue-spec investigation session
s-6de6de055cd791bc3f3b.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-07-07 12:59:07 +00:00
澄潭
d5f2b624fb
feat: initialize issue-spec workflow for Higress ( #4059 )
...
Signed-off-by: johnlanni <johnlanni@users.noreply.github.com >
Co-authored-by: johnlanni <johnlanni@users.noreply.github.com >
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-04 21:55:53 +08:00
澄潭
6c98ea74e0
fix: avoid waiting for missing request bodies in transformer ( #4024 )
...
Signed-off-by: johnlanni <zty98751@alibaba-inc.com >
2026-06-25 17:36:01 +08:00
EndlessSeeker
39ec41aab6
Release v2.2.3 ( #4019 )
...
Signed-off-by: EndlessSeeker <1766508902@qq.com >
v2.2.3
2026-06-25 10:34:30 +08:00
澄潭
910c26ec14
chore: update envoy submodule ( #4017 )
...
Signed-off-by: zty98751 <zty98751@alibaba-inc.com >
2026-06-24 19:06:16 +08:00
EndlessSeeker
582af464c0
Revert "fix: Skip TLS certificate verification for HTTPS upstreams" ( #4016 )
...
Signed-off-by: EndlessSeeker <1766508902@qq.com >
2026-06-24 15:39:32 +08:00
EndlessSeeker
04389fd0c6
fix: harden cluster key rate limit cookie parsing ( #4012 )
...
Signed-off-by: EndlessSeeker <1766508902@qq.com >
2026-06-24 15:03:05 +08:00
EndlessSeeker
10498a2c86
fix(oidc): fail closed when verifier is unavailable ( #4013 )
...
Signed-off-by: EndlessSeeker <1766508902@qq.com >
Co-authored-by: Jingze <52855280+Jing-ze@users.noreply.github.com >
2026-06-24 14:22:24 +08:00
yangjuan
e958290283
feat(ai-context-limit): add context window limit wasm plugin ( #4000 )
...
Signed-off-by: Cai Rui <cairui@U-7VTK6WQN-2207.local >
2026-06-24 13:40:51 +08:00
DENG
6d1c55c1fb
fix(ai-proxy): add ids for Vertex tool calls ( #3990 )
...
Signed-off-by: DENG <33118163+XinhhD@users.noreply.github.com >
Co-authored-by: woody <yaodiwu618@gmail.com >
2026-06-23 20:34:54 +08:00
9r0k
e57f18e581
feat(ai-proxy): vLLM passthrough for Anthropic Messages and newer OpenAI endpoints ( #3989 )
...
Signed-off-by: Rand01ph <tanyawei1991@gmail.com >
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
Co-authored-by: woody <yaodiwu618@gmail.com >
2026-06-23 19:34:54 +08:00
Kent Dong
1694f48fd9
fix(ai-cache): handle SSE first chunk with role only ( fixes #3953 ) ( #3962 )
...
Signed-off-by: CH3CHO <ch3cho@qq.com >
Co-authored-by: woody <yaodiwu618@gmail.com >
2026-06-23 17:38:50 +08:00
cyberslack_lee
7c94b5a822
fix: fix some typo errors ( #3988 )
...
Co-authored-by: woody <yaodiwu618@gmail.com >
2026-06-23 11:08:44 +08:00
geekspeng
ab0085362c
fix(helm): apply imagePullPolicy to controller container and promtail sidecar ( #4002 )
...
Signed-off-by: geekspeng <geekspeng@icloud.com >
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com >
2026-06-22 22:33:03 +08:00
zijiren
9c13b6418c
feat: Enhance SSL passthrough support ( #3943 )
...
Signed-off-by: zijiren233 <pyh1670605849@gmail.com >
2026-06-22 21:06:42 +08:00
EndlessSeeker
f060c9f51d
fix: preserve ingress load balancer hostnames ( #3994 )
...
Signed-off-by: EndlessSeeker <1766508902@qq.com >
2026-06-22 11:34:38 +08:00
Heracles
bd6039f53b
fix(helm): use Chart.Version as default plugin-server image tag ( #3998 )
...
Signed-off-by: yqz <2678785492@qq.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-06-22 09:28:36 +08:00
小画家
36bd830029
bugfix: fix golang-filter architecture mismatch during local gateway build on arm64 macOS ( #3905 )
...
Signed-off-by: 胥寅 <xuuyin@dingtalk.com >
Co-authored-by: 胥寅 <xuuyin@dingtalk.com >
2026-06-21 18:13:58 +08:00
澄潭
4db4633560
chore: update envoy submodule ( #3987 )
...
Signed-off-by: zty98751 <zty98751@alibaba-inc.com >
2026-06-17 20:28:15 +08:00
EndlessSeeker
efaef2e3d0
Support configurable GatewayClass isolation ( #3981 )
...
Signed-off-by: EndlessSeeker <1766508902@qq.com >
2026-06-17 20:27:45 +08:00
geekspeng
e758504d72
fix(helm): move imagePullPolicy from PodSpec to container level in gateway pod template ( #3924 )
...
Signed-off-by: geekspeng <geekspeng@icloud.com >
2026-06-17 16:22:51 +08:00
DENG
3c3a067f07
fix(ai-proxy): include tool call type in Claude stream deltas ( #3985 )
...
Signed-off-by: DENG <33118163+XinhhD@users.noreply.github.com >
Co-authored-by: woody <yaodiwu618@gmail.com >
2026-06-17 12:18:18 +08:00
DENG
7e11e2f320
fix(ai-proxy): preserve Vertex thoughtSignature in OpenAI tool calls ( #3973 )
...
Signed-off-by: DENG <33118163+XinhhD@users.noreply.github.com >
2026-06-17 11:40:38 +08:00
DENG
7abf27a2a3
fix(ai-proxy): clean client Authorization header for api-key providers ( #3956 )
...
Signed-off-by: DENG <33118163+XinhhD@users.noreply.github.com >
Co-authored-by: woody <yaodiwu618@gmail.com >
2026-06-16 16:19:37 +08:00
EndlessSeeker
d1f95f6e54
fix: set gateway status address type by value ( #3980 )
...
Signed-off-by: EndlessSeeker <1766508902@qq.com >
2026-06-16 13:41:25 +08:00
EndlessSeeker
83c12d571d
feat(helm): allow skipping IngressClass creation ( #3979 )
...
Signed-off-by: EndlessSeeker <1766508902@qq.com >
2026-06-16 11:26:56 +08:00
Jingze
45fc5a31bc
test(wasm-plugins): lift unit-test coverage to ≥90% across 9 plugins ( #3879 )
...
Signed-off-by: jingze <daijingze.djz@alibaba-inc.com >
Co-authored-by: woody <yaodiwu618@gmail.com >
2026-06-15 20:33:10 +08:00
Jingze
3065d4e071
test(traffic-tag): cover operator matrix, weight CDF boundaries, and parser reject paths ( #3878 )
...
Signed-off-by: jingze <daijingze.djz@alibaba-inc.com >
2026-06-15 20:32:38 +08:00
Jingze
c65d4cd938
test(hmac-auth-apisix): cover algorithm matrix, clock skew, and auth edge cases ( #3875 )
...
Signed-off-by: jingze <daijingze.djz@alibaba-inc.com >
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com >
2026-06-15 20:31:02 +08:00
Jingze
547b7bf45a
test(transformer): add end-to-end coverage and fix silent error wrapping ( #3873 )
...
Signed-off-by: jingze <daijingze.djz@alibaba-inc.com >
2026-06-15 20:29:51 +08:00
Jingze
bf0b1e96c5
test(wasm-go/mcp): expand unit test coverage for mcp-server framework ( #3871 )
...
Signed-off-by: jingze <daijingze.djz@alibaba-inc.com >
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com >
2026-06-15 20:29:20 +08:00
EndlessSeeker
c69526b30e
fix(helm): disable alpha Gateway API watches by default ( #3971 )
...
Signed-off-by: EndlessSeeker <1766508902@qq.com >
2026-06-15 18:52:28 +08:00
EndlessSeeker
73e7510eca
fix: merge InferencePool route configs during HTTPRoute merge ( #3964 )
2026-06-12 18:05:24 +08:00
yangjuan
2897c1e83a
feat(model-router): add keepOriginalModelName option to preserve full model name ( #3916 )
...
Signed-off-by: Cai Rui <yangjuan.cr@alibaba-inc.com >
2026-06-07 15:49:45 +08:00
FAUST
b69b5c7c10
doc: add missed chinese readme for extensions ( #3890 )
...
Signed-off-by: zhoujinyu <2319109590@qq.com >
2026-06-07 12:26:08 +08:00
Jingze
57db9ccc46
fix(oidc): fix Set-Cookie header corruption during session refresh ( #3928 )
...
Signed-off-by: jingze <daijingze.djz@alibaba-inc.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-06-05 17:58:20 +08:00
澄潭
137d76332e
fix: rebuild mcp filter on high memory usage ( #3922 )
...
Signed-off-by: johnlanni <zty98751@alibaba-inc.com >
2026-06-05 10:57:43 +08:00
澄潭
d888ab23de
fix(wasm): remove request-count rebuild triggers ( #3923 )
...
Signed-off-by: johnlanni <zty98751@alibaba-inc.com >
2026-06-05 10:57:24 +08:00
Jingze
29b5a533e6
fix(oidc): bump oauth2-proxy to fix nil panic in verifier callback ( #3914 )
...
Signed-off-by: jingze <daijingze.djz@alibaba-inc.com >
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-06-04 10:52:24 +08:00
Jingze
071086904d
fix(ai-proxy): strip anthropic-beta and anthropic-version headers in vertex passthrough ( #3904 )
...
Signed-off-by: jingze <daijingze.djz@alibaba-inc.com >
2026-06-02 20:26:30 +08:00
JianweiWang
58ffdae6ba
feat(ai-security-guard): add Embedding API content detection support ( #3895 )
...
Signed-off-by: root <jianwei.wjw@alibaba-inc.com >
2026-06-02 12:11:00 +08:00
JianweiWang
a45b1dde6c
fix(ai-statistics): skip empty streaming model values ( #3851 )
...
Signed-off-by: jianwei.wjw <jianwei.wjw@alibaba-inc.com >
2026-06-02 12:10:46 +08:00
zat366
52c99eb27d
feat(ai-load-balancer): add cluster_hash load balancing policy with FNV-1a consistent hashing ( #3898 )
...
Signed-off-by: zat366 <authentic.zhao@gmail.com >
2026-06-01 10:19:46 +08:00
JianweiWang
c21a38e783
feat(ai-security-guard): structured x_higress deny response, error-path metrics, and AI logging ( #3894 )
...
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com >
Co-authored-by: rinfx <yucheng.lxr@alibaba-inc.com >
2026-05-29 10:45:10 +08:00
Jingze
385f8d8b4e
fix(ai-proxy): natively route Anthropic Messages to vertex :rawPredict ( #3860 )
...
Signed-off-by: jingze <daijingze.djz@alibaba-inc.com >
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com >
2026-05-28 09:54:56 +08:00
Betula-L
a86aaadaa4
feat(jwt-auth): support remote JWKS ( #3838 )
...
Signed-off-by: Betula-L <6059935+Betula-L@users.noreply.github.com >
Co-authored-by: Betula-L <6059935+Betula-L@users.noreply.github.com >
2026-05-25 16:04:10 +08:00
Kent Dong
e6fc09b14f
fix: Fix test cases in registry/nacos/mcpserver/watcher_test.go ( #3869 )
...
Signed-off-by: CH3CHO <ch3cho@qq.com >
2026-05-25 15:15:03 +08:00
Kent Dong
b8ff815100
fix: Fix the description of basePath related fields of ai-proxy plugin ( #3870 )
...
Signed-off-by: CH3CHO <ch3cho@qq.com >
2026-05-25 15:02:39 +08:00
zat366
632c6ca655
fix(ai-proxy): use HasSuffix instead of Contains in claude.GetApiName to prevent sub-path misidentification ( #3839 )
...
Signed-off-by: zat366 <authentic.zhao@gmail.com >
2026-05-25 14:34:45 +08:00
Ghxst
8a0f8a8208
feature: support plural key-auth credentials ( #3849 )
...
Signed-off-by: GHX5T-SOL <200635707+GHX5T-SOL@users.noreply.github.com >
Co-authored-by: GHX5T-SOL <200635707+GHX5T-SOL@users.noreply.github.com >
2026-05-24 17:56:58 +08:00