panxiao81/homelab-infra
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity

允许 Envoy 后端使用 TLS 1.3，修复 Incus 入口 503 #164

Merged
panxiao81 merged 1 commits from feat/incus-envoy-tls13 into main 2026-09-25 21:12:12 +00:00
Conversation 0 Commits 1 Files Changed 4
+24
panxiao81 commented 2026-09-25 21:09:31 +00:00
Owner
Copy Link
Copy Source

Incus 7.5.1 仅接受 TLS 1.3，现有 Envoy 到该后端的连接因 TLSV1_ALERT_PROTOCOL_VERSION 返回 503。

新增 EnvoyProxy/eg 并由共享 Gateway 引用，显式允许后端 TLS 1.2–1.3；保留旧后端兼容性，不升级网关，不修改前端证书、listener 或现有路由。

验证：yamllint、Kustomize 渲染、git diff --check、Kubernetes 服务端 dry-run 均通过。维护者已授权发布；合并后由 Flux 生效，再验证 Incus 入口及既有登录入口。

Incus 7.5.1 仅接受 TLS 1.3，现有 Envoy 到该后端的连接因 TLSV1_ALERT_PROTOCOL_VERSION 返回 503。 新增 EnvoyProxy/eg 并由共享 Gateway 引用，显式允许后端 TLS 1.2–1.3；保留旧后端兼容性，不升级网关，不修改前端证书、listener 或现有路由。 验证：yamllint、Kustomize 渲染、git diff --check、Kubernetes 服务端 dry-run 均通过。维护者已授权发布；合并后由 Flux 生效，再验证 Incus 入口及既有登录入口。
panxiao81 added 1 commit 2026-09-25 21:09:33 +00:00
允许 Envoy 后端协商 TLS 1.3 以接入 Incus
yaml / yaml (pull_request) Successful in 1m54s
Details
ce0b0ddf6d
panxiao81 merged commit f5c8c09f96 into main 2026-09-25 21:12:12 +00:00
panxiao81 deleted branch feat/incus-envoy-tls13 2026-09-25 21:12:15 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
panxiao81 (Xiao Pan)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: panxiao81/homelab-infra#164