From 5b04f7666301cb41c06faf5621090d98fd190068 Mon Sep 17 00:00:00 2001 From: Aditya7880900936 Date: Thu, 15 Jan 2026 11:43:35 +0530 Subject: [PATCH 1/6] fix(tcp): avoid duplicate EmptyCluster routes for listeners without routes Signed-off-by: Aditya7880900936 --- .../testdata/in/xds-ir/tcp-emptycluster.yaml | 35 ++++++++ .../out/xds-ir/tcp-emptycluster.clusters.yaml | 2 + .../xds-ir/tcp-emptycluster.endpoints.yaml | 1 + .../xds-ir/tcp-emptycluster.listeners.yaml | 86 +++++++++++++++++++ .../out/xds-ir/tcp-emptycluster.routes.yaml | 1 + internal/xds/translator/translator.go | 19 ++-- 6 files changed, 139 insertions(+), 5 deletions(-) create mode 100644 internal/xds/translator/testdata/in/xds-ir/tcp-emptycluster.yaml create mode 100644 internal/xds/translator/testdata/out/xds-ir/tcp-emptycluster.clusters.yaml create mode 100644 internal/xds/translator/testdata/out/xds-ir/tcp-emptycluster.endpoints.yaml create mode 100644 internal/xds/translator/testdata/out/xds-ir/tcp-emptycluster.listeners.yaml create mode 100644 internal/xds/translator/testdata/out/xds-ir/tcp-emptycluster.routes.yaml diff --git a/internal/xds/translator/testdata/in/xds-ir/tcp-emptycluster.yaml b/internal/xds/translator/testdata/in/xds-ir/tcp-emptycluster.yaml new file mode 100644 index 0000000000..66f8869e3f --- /dev/null +++ b/internal/xds/translator/testdata/in/xds-ir/tcp-emptycluster.yaml @@ -0,0 +1,35 @@ +tcp: +- address: 0.0.0.0 + connection: + bufferLimit: 50000000 + limit: + closeDelay: 10s + value: 3 + proxyProtocol: + optional: false + name: envoy-gateway/gateway-1/tls-1 + port: 10443 + tcpKeepalive: + idleTime: 1200 + interval: 60 + probes: 3 + timeout: + tcp: + idleTimeout: 20m0s +- address: 0.0.0.0 + connection: + bufferLimit: 50000000 + limit: + closeDelay: 10s + value: 3 + proxyProtocol: + optional: false + name: envoy-gateway/gateway-1/tls-2 + port: 11443 + tcpKeepalive: + idleTime: 1200 + interval: 60 + probes: 3 + timeout: + tcp: + idleTimeout: 20m0s \ No newline at end of file diff --git a/internal/xds/translator/testdata/out/xds-ir/tcp-emptycluster.clusters.yaml b/internal/xds/translator/testdata/out/xds-ir/tcp-emptycluster.clusters.yaml new file mode 100644 index 0000000000..0764d46f0e --- /dev/null +++ b/internal/xds/translator/testdata/out/xds-ir/tcp-emptycluster.clusters.yaml @@ -0,0 +1,2 @@ +- name: EmptyCluster + type: STATIC diff --git a/internal/xds/translator/testdata/out/xds-ir/tcp-emptycluster.endpoints.yaml b/internal/xds/translator/testdata/out/xds-ir/tcp-emptycluster.endpoints.yaml new file mode 100644 index 0000000000..fe51488c70 --- /dev/null +++ b/internal/xds/translator/testdata/out/xds-ir/tcp-emptycluster.endpoints.yaml @@ -0,0 +1 @@ +[] diff --git a/internal/xds/translator/testdata/out/xds-ir/tcp-emptycluster.listeners.yaml b/internal/xds/translator/testdata/out/xds-ir/tcp-emptycluster.listeners.yaml new file mode 100644 index 0000000000..4a9b369d40 --- /dev/null +++ b/internal/xds/translator/testdata/out/xds-ir/tcp-emptycluster.listeners.yaml @@ -0,0 +1,86 @@ +- address: + socketAddress: + address: 0.0.0.0 + portValue: 10443 + filterChains: + - filters: + - name: envoy.filters.network.connection_limit + typedConfig: + '@type': type.googleapis.com/envoy.extensions.filters.network.connection_limit.v3.ConnectionLimit + delay: 10s + maxConnections: "3" + statPrefix: tcp-10443 + - name: envoy.filters.network.tcp_proxy + typedConfig: + '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy + cluster: EmptyCluster + idleTimeout: 1200s + statPrefix: tcp-10443 + name: EmptyCluster + listenerFilters: + - name: envoy.filters.listener.proxy_protocol + typedConfig: + '@type': type.googleapis.com/envoy.extensions.filters.listener.proxy_protocol.v3.ProxyProtocol + maxConnectionsToAcceptPerSocketEvent: 1 + name: envoy-gateway/gateway-1/tls-1 + perConnectionBufferLimitBytes: 50000000 + socketOptions: + - description: socket option to enable tcp keep alive + intValue: "1" + level: "1" + name: "9" + - description: socket option for keep alive probes + intValue: "3" + level: "6" + name: "6" + - description: socket option for keep alive idle time + intValue: "1200" + level: "6" + name: "4" + - description: socket option for keep alive interval + intValue: "60" + level: "6" + name: "5" +- address: + socketAddress: + address: 0.0.0.0 + portValue: 11443 + filterChains: + - filters: + - name: envoy.filters.network.connection_limit + typedConfig: + '@type': type.googleapis.com/envoy.extensions.filters.network.connection_limit.v3.ConnectionLimit + delay: 10s + maxConnections: "3" + statPrefix: tcp-11443 + - name: envoy.filters.network.tcp_proxy + typedConfig: + '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy + cluster: EmptyCluster + idleTimeout: 1200s + statPrefix: tcp-11443 + name: EmptyCluster + listenerFilters: + - name: envoy.filters.listener.proxy_protocol + typedConfig: + '@type': type.googleapis.com/envoy.extensions.filters.listener.proxy_protocol.v3.ProxyProtocol + maxConnectionsToAcceptPerSocketEvent: 1 + name: envoy-gateway/gateway-1/tls-2 + perConnectionBufferLimitBytes: 50000000 + socketOptions: + - description: socket option to enable tcp keep alive + intValue: "1" + level: "1" + name: "9" + - description: socket option for keep alive probes + intValue: "3" + level: "6" + name: "6" + - description: socket option for keep alive idle time + intValue: "1200" + level: "6" + name: "4" + - description: socket option for keep alive interval + intValue: "60" + level: "6" + name: "5" diff --git a/internal/xds/translator/testdata/out/xds-ir/tcp-emptycluster.routes.yaml b/internal/xds/translator/testdata/out/xds-ir/tcp-emptycluster.routes.yaml new file mode 100644 index 0000000000..fe51488c70 --- /dev/null +++ b/internal/xds/translator/testdata/out/xds-ir/tcp-emptycluster.routes.yaml @@ -0,0 +1 @@ +[] diff --git a/internal/xds/translator/translator.go b/internal/xds/translator/translator.go index 89b3f1aed7..48864793b6 100644 --- a/internal/xds/translator/translator.go +++ b/internal/xds/translator/translator.go @@ -750,6 +750,8 @@ func (t *Translator) processTCPListenerXdsTranslation( // errors and return them at the end. var errs, err error + var sharedEmptyTCPRoute *ir.TCPRoute + for _, tcpListener := range tcpListeners { // Search for an existing listener, if it does not exist, create one. xdsListener := findXdsListenerByHostPort(tCtx, tcpListener.Address, tcpListener.Port, corev3.SocketAddress_TCP) @@ -825,21 +827,27 @@ func (t *Translator) processTCPListenerXdsTranslation( // If there are no routes, add a route without a destination to the listener to create a filter chain // This is needed because Envoy requires a filter chain to be present in the listener, otherwise it will reject the listener and report a warning if len(tcpListener.Routes) == 0 { + // Ensure EmptyCluster exists (safe to do repeatedly) if findXdsCluster(tCtx, emptyClusterName) == nil { if err := tCtx.AddXdsResource(resourcev3.ClusterType, emptyRouteCluster); err != nil { errs = errors.Join(errs, err) } } - emptyRoute := &ir.TCPRoute{ - Name: emptyClusterName, - Destination: &ir.RouteDestination{ + // Reuse the same route object + if sharedEmptyTCPRoute == nil { + sharedEmptyTCPRoute = &ir.TCPRoute{ Name: emptyClusterName, - }, + Destination: &ir.RouteDestination{ + Name: emptyClusterName, + }, + } } + + // IMPORTANT: always add a filter chain per listener if err := t.addXdsTCPFilterChain( xdsListener, - emptyRoute, + sharedEmptyTCPRoute, emptyClusterName, accesslog, tcpListener.Timeout, @@ -848,6 +856,7 @@ func (t *Translator) processTCPListenerXdsTranslation( errs = errors.Join(errs, err) } } + } return errs From d8abedb6d7e9e6143f4433386421ccbe68306a9f Mon Sep 17 00:00:00 2001 From: Aditya7880900936 Date: Fri, 6 Feb 2026 13:44:39 +0530 Subject: [PATCH 2/6] xds: ensure TCP/TLS passthrough listeners get empty filter chains when no routes exist Signed-off-by: Aditya7880900936 --- ...cp-multiple-tls-passthrough-no-routes.yaml | 24 ++++++++ ...le-tls-passthrough-no-routes.clusters.yaml | 6 ++ ...e-tls-passthrough-no-routes.endpoints.yaml | 1 + ...e-tls-passthrough-no-routes.listeners.yaml | 29 ++++++++++ ...iple-tls-passthrough-no-routes.routes.yaml | 1 + internal/xds/translator/translator.go | 56 ++++++++++++++----- 6 files changed, 102 insertions(+), 15 deletions(-) create mode 100644 internal/xds/translator/testdata/in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml create mode 100644 internal/xds/translator/testdata/out/xds-ir/tcp-multiple-tls-passthrough-no-routes.clusters.yaml create mode 100644 internal/xds/translator/testdata/out/xds-ir/tcp-multiple-tls-passthrough-no-routes.endpoints.yaml create mode 100644 internal/xds/translator/testdata/out/xds-ir/tcp-multiple-tls-passthrough-no-routes.listeners.yaml create mode 100644 internal/xds/translator/testdata/out/xds-ir/tcp-multiple-tls-passthrough-no-routes.routes.yaml diff --git a/internal/xds/translator/testdata/in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml b/internal/xds/translator/testdata/in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml new file mode 100644 index 0000000000..1bc137386d --- /dev/null +++ b/internal/xds/translator/testdata/in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml @@ -0,0 +1,24 @@ +tcp: +- name: tls-passthrough-1 + address: 0.0.0.0 + port: 10443 + protocol: TLS + tls: + mode: Passthrough + routes: [] + +- name: tls-passthrough-2 + address: 0.0.0.0 + port: 10443 + protocol: TLS + tls: + mode: Passthrough + routes: [] + +- name: tls-passthrough-3 + address: 0.0.0.0 + port: 10443 + protocol: TLS + tls: + mode: Passthrough + routes: [] \ No newline at end of file diff --git a/internal/xds/translator/testdata/out/xds-ir/tcp-multiple-tls-passthrough-no-routes.clusters.yaml b/internal/xds/translator/testdata/out/xds-ir/tcp-multiple-tls-passthrough-no-routes.clusters.yaml new file mode 100644 index 0000000000..28becabe36 --- /dev/null +++ b/internal/xds/translator/testdata/out/xds-ir/tcp-multiple-tls-passthrough-no-routes.clusters.yaml @@ -0,0 +1,6 @@ +- name: EmptyCluster-tls-passthrough-1 + type: STATIC +- name: EmptyCluster-tls-passthrough-2 + type: STATIC +- name: EmptyCluster-tls-passthrough-3 + type: STATIC diff --git a/internal/xds/translator/testdata/out/xds-ir/tcp-multiple-tls-passthrough-no-routes.endpoints.yaml b/internal/xds/translator/testdata/out/xds-ir/tcp-multiple-tls-passthrough-no-routes.endpoints.yaml new file mode 100644 index 0000000000..fe51488c70 --- /dev/null +++ b/internal/xds/translator/testdata/out/xds-ir/tcp-multiple-tls-passthrough-no-routes.endpoints.yaml @@ -0,0 +1 @@ +[] diff --git a/internal/xds/translator/testdata/out/xds-ir/tcp-multiple-tls-passthrough-no-routes.listeners.yaml b/internal/xds/translator/testdata/out/xds-ir/tcp-multiple-tls-passthrough-no-routes.listeners.yaml new file mode 100644 index 0000000000..fd6f114e8b --- /dev/null +++ b/internal/xds/translator/testdata/out/xds-ir/tcp-multiple-tls-passthrough-no-routes.listeners.yaml @@ -0,0 +1,29 @@ +- address: + socketAddress: + address: 0.0.0.0 + portValue: 10443 + filterChains: + - filters: + - name: envoy.filters.network.tcp_proxy + typedConfig: + '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy + cluster: EmptyCluster-tls-passthrough-1 + statPrefix: tcp-10443 + name: EmptyCluster-tls-passthrough-1 + - filters: + - name: envoy.filters.network.tcp_proxy + typedConfig: + '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy + cluster: EmptyCluster-tls-passthrough-2 + statPrefix: tcp-10443 + name: EmptyCluster-tls-passthrough-2 + - filters: + - name: envoy.filters.network.tcp_proxy + typedConfig: + '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy + cluster: EmptyCluster-tls-passthrough-3 + statPrefix: tcp-10443 + name: EmptyCluster-tls-passthrough-3 + maxConnectionsToAcceptPerSocketEvent: 1 + name: tls-passthrough-1 + perConnectionBufferLimitBytes: 32768 diff --git a/internal/xds/translator/testdata/out/xds-ir/tcp-multiple-tls-passthrough-no-routes.routes.yaml b/internal/xds/translator/testdata/out/xds-ir/tcp-multiple-tls-passthrough-no-routes.routes.yaml new file mode 100644 index 0000000000..fe51488c70 --- /dev/null +++ b/internal/xds/translator/testdata/out/xds-ir/tcp-multiple-tls-passthrough-no-routes.routes.yaml @@ -0,0 +1 @@ +[] diff --git a/internal/xds/translator/translator.go b/internal/xds/translator/translator.go index 48864793b6..8cd9d82130 100644 --- a/internal/xds/translator/translator.go +++ b/internal/xds/translator/translator.go @@ -824,31 +824,57 @@ func (t *Translator) processTCPListenerXdsTranslation( } } - // If there are no routes, add a route without a destination to the listener to create a filter chain - // This is needed because Envoy requires a filter chain to be present in the listener, otherwise it will reject the listener and report a warning if len(tcpListener.Routes) == 0 { - // Ensure EmptyCluster exists (safe to do repeatedly) - if findXdsCluster(tCtx, emptyClusterName) == nil { - if err := tCtx.AddXdsResource(resourcev3.ClusterType, emptyRouteCluster); err != nil { - errs = errors.Join(errs, err) + isTLSPassthrough := tcpListener.TLS != nil + + clusterName := emptyClusterName + var route *ir.TCPRoute + + if isTLSPassthrough { + // TLS passthrough listeners must not share EmptyCluster + clusterName = fmt.Sprintf("%s-%s", emptyClusterName, tcpListener.Name) + + if findXdsCluster(tCtx, clusterName) == nil { + if err := tCtx.AddXdsResource( + resourcev3.ClusterType, + &clusterv3.Cluster{ + Name: clusterName, + ClusterDiscoveryType: &clusterv3.Cluster_Type{Type: clusterv3.Cluster_STATIC}, + }, + ); err != nil { + errs = errors.Join(errs, err) + } } - } - // Reuse the same route object - if sharedEmptyTCPRoute == nil { - sharedEmptyTCPRoute = &ir.TCPRoute{ - Name: emptyClusterName, + route = &ir.TCPRoute{ + Name: clusterName, Destination: &ir.RouteDestination{ - Name: emptyClusterName, + Name: clusterName, }, } + } else { + // Non-TLS-passthrough: reuse shared EmptyCluster + if findXdsCluster(tCtx, emptyClusterName) == nil { + if err := tCtx.AddXdsResource(resourcev3.ClusterType, emptyRouteCluster); err != nil { + errs = errors.Join(errs, err) + } + } + + if sharedEmptyTCPRoute == nil { + sharedEmptyTCPRoute = &ir.TCPRoute{ + Name: emptyClusterName, + Destination: &ir.RouteDestination{ + Name: emptyClusterName, + }, + } + } + route = sharedEmptyTCPRoute } - // IMPORTANT: always add a filter chain per listener if err := t.addXdsTCPFilterChain( xdsListener, - sharedEmptyTCPRoute, - emptyClusterName, + route, + clusterName, accesslog, tcpListener.Timeout, tcpListener.Connection, From db7d9b52d6d6b16bacbfb43e0aa37e39cdd4d8fb Mon Sep 17 00:00:00 2001 From: Aditya7880900936 Date: Tue, 17 Feb 2026 23:39:18 +0530 Subject: [PATCH 3/6] fix: normalize line endings and ensure newline at EOF for tcp testdata Signed-off-by: Aditya7880900936 --- .../testdata/in/xds-ir/tcp-emptycluster.yaml | 70 +++++++++---------- ...cp-multiple-tls-passthrough-no-routes.yaml | 46 ++++++------ 2 files changed, 57 insertions(+), 59 deletions(-) diff --git a/internal/xds/translator/testdata/in/xds-ir/tcp-emptycluster.yaml b/internal/xds/translator/testdata/in/xds-ir/tcp-emptycluster.yaml index 66f8869e3f..696f372e7a 100644 --- a/internal/xds/translator/testdata/in/xds-ir/tcp-emptycluster.yaml +++ b/internal/xds/translator/testdata/in/xds-ir/tcp-emptycluster.yaml @@ -1,35 +1,35 @@ -tcp: -- address: 0.0.0.0 - connection: - bufferLimit: 50000000 - limit: - closeDelay: 10s - value: 3 - proxyProtocol: - optional: false - name: envoy-gateway/gateway-1/tls-1 - port: 10443 - tcpKeepalive: - idleTime: 1200 - interval: 60 - probes: 3 - timeout: - tcp: - idleTimeout: 20m0s -- address: 0.0.0.0 - connection: - bufferLimit: 50000000 - limit: - closeDelay: 10s - value: 3 - proxyProtocol: - optional: false - name: envoy-gateway/gateway-1/tls-2 - port: 11443 - tcpKeepalive: - idleTime: 1200 - interval: 60 - probes: 3 - timeout: - tcp: - idleTimeout: 20m0s \ No newline at end of file +tcp: +- address: 0.0.0.0 + connection: + bufferLimit: 50000000 + limit: + closeDelay: 10s + value: 3 + proxyProtocol: + optional: false + name: envoy-gateway/gateway-1/tls-1 + port: 10443 + tcpKeepalive: + idleTime: 1200 + interval: 60 + probes: 3 + timeout: + tcp: + idleTimeout: 20m0s +- address: 0.0.0.0 + connection: + bufferLimit: 50000000 + limit: + closeDelay: 10s + value: 3 + proxyProtocol: + optional: false + name: envoy-gateway/gateway-1/tls-2 + port: 11443 + tcpKeepalive: + idleTime: 1200 + interval: 60 + probes: 3 + timeout: + tcp: + idleTimeout: 20m0s diff --git a/internal/xds/translator/testdata/in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml b/internal/xds/translator/testdata/in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml index 1bc137386d..57ba86bbbe 100644 --- a/internal/xds/translator/testdata/in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml +++ b/internal/xds/translator/testdata/in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml @@ -1,24 +1,22 @@ -tcp: -- name: tls-passthrough-1 - address: 0.0.0.0 - port: 10443 - protocol: TLS - tls: - mode: Passthrough - routes: [] - -- name: tls-passthrough-2 - address: 0.0.0.0 - port: 10443 - protocol: TLS - tls: - mode: Passthrough - routes: [] - -- name: tls-passthrough-3 - address: 0.0.0.0 - port: 10443 - protocol: TLS - tls: - mode: Passthrough - routes: [] \ No newline at end of file +tcp: +- name: tls-passthrough-1 + address: 0.0.0.0 + port: 10443 + protocol: TLS + tls: + mode: Passthrough + routes: [] +- name: tls-passthrough-2 + address: 0.0.0.0 + port: 10443 + protocol: TLS + tls: + mode: Passthrough + routes: [] +- name: tls-passthrough-3 + address: 0.0.0.0 + port: 10443 + protocol: TLS + tls: + mode: Passthrough + routes: [] From 0c51809ce008c737d74319235d8f1fe21ce61e6e Mon Sep 17 00:00:00 2001 From: Aditya7880900936 Date: Wed, 18 Feb 2026 00:00:07 +0530 Subject: [PATCH 4/6] fix: remove unsupported protocol field from tcp passthrough testdata Signed-off-by: Aditya7880900936 --- .../in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml | 3 --- 1 file changed, 3 deletions(-) diff --git a/internal/xds/translator/testdata/in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml b/internal/xds/translator/testdata/in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml index 57ba86bbbe..7f96958f3e 100644 --- a/internal/xds/translator/testdata/in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml +++ b/internal/xds/translator/testdata/in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml @@ -2,21 +2,18 @@ tcp: - name: tls-passthrough-1 address: 0.0.0.0 port: 10443 - protocol: TLS tls: mode: Passthrough routes: [] - name: tls-passthrough-2 address: 0.0.0.0 port: 10443 - protocol: TLS tls: mode: Passthrough routes: [] - name: tls-passthrough-3 address: 0.0.0.0 port: 10443 - protocol: TLS tls: mode: Passthrough routes: [] From 8e13cbb39c6d0159d4f07c276b6e915942e852ba Mon Sep 17 00:00:00 2001 From: Aditya7880900936 Date: Wed, 18 Feb 2026 00:21:22 +0530 Subject: [PATCH 5/6] fix: correct TLS passthrough IR representation for multiple TCP listeners Signed-off-by: Aditya7880900936 --- .../in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/internal/xds/translator/testdata/in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml b/internal/xds/translator/testdata/in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml index 7f96958f3e..45182b6048 100644 --- a/internal/xds/translator/testdata/in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml +++ b/internal/xds/translator/testdata/in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml @@ -3,17 +3,17 @@ tcp: address: 0.0.0.0 port: 10443 tls: - mode: Passthrough + inspector: {} routes: [] - name: tls-passthrough-2 address: 0.0.0.0 port: 10443 tls: - mode: Passthrough + inspector: {} routes: [] - name: tls-passthrough-3 address: 0.0.0.0 port: 10443 tls: - mode: Passthrough + inspector: {} routes: [] From 807f03ffb4bd7dc84902a9d79231f2305f45670a Mon Sep 17 00:00:00 2001 From: Aditya7880900936 Date: Wed, 18 Feb 2026 00:30:06 +0530 Subject: [PATCH 6/6] fix(translator): correct TCP passthrough IR schema for empty routes Signed-off-by: Aditya7880900936 --- .../xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml | 9 +++------ 1 file changed, 3 insertions(+), 6 deletions(-) diff --git a/internal/xds/translator/testdata/in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml b/internal/xds/translator/testdata/in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml index 45182b6048..e4a08bf14a 100644 --- a/internal/xds/translator/testdata/in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml +++ b/internal/xds/translator/testdata/in/xds-ir/tcp-multiple-tls-passthrough-no-routes.yaml @@ -2,18 +2,15 @@ tcp: - name: tls-passthrough-1 address: 0.0.0.0 port: 10443 - tls: - inspector: {} + tls: {} routes: [] - name: tls-passthrough-2 address: 0.0.0.0 port: 10443 - tls: - inspector: {} + tls: {} routes: [] - name: tls-passthrough-3 address: 0.0.0.0 port: 10443 - tls: - inspector: {} + tls: {} routes: []