AlinsRan commented on PR #2818: URL: https://github.com/apache/apisix-ingress-controller/pull/2818#issuecomment-5127393138
Follow-up hardening in 2bd36018 (kept in sync with EE): the server_port explicit-target signal is no longer re-derived in the translator from the flattened listener union, which lost Gateway provenance. It is now computed in `ParseRouteParentRefs` per parentRef against that parentRef's own Gateway (`RouteParentRefContext.ExplicitListenerMatch`) and aggregated onto `TranslateContext.HasExplicitListenerMatch`; `shouldInjectServerPortVars` consumes the boolean. This prevents an invalid explicit ref on one Gateway from being satisfied by an identically named/ported listener matched through a different parentRef's Gateway. Added `TestParseRouteParentRefs_ExplicitListenerMatch` covering the cross-Gateway collision. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
