repo: Yaml cleanups (envoyproxy#23654)

Signed-off-by: Ryan Northey <ryan@synca.io>

.yamllint

@@ -1,9 +1,16 @@
 extends: default
 
 rules:
-  line-length:
-    max: 200
-    level: warning
+  document-start: false
   indentation:
     spaces: consistent
     indent-sequences: false
+  line-length:
+    max: 200
+    level: warning
+  truthy:
+    allowed-values:
+    - "yes"
+    - "no"
+    - "true"
+    - "false"

.zuul.yaml

@@ -2,7 +2,7 @@
     name: envoyproxy/envoy
     check:
       jobs:
-        - envoy-build-arm64
+      - envoy-build-arm64
 
 - job:
     name: envoy-build-arm64

api/buf.yaml

@@ -1,22 +1,22 @@
 version: v1
 deps:
-    - buf.build/googleapis/googleapis:62f35d8aed1149c291d606d958a7ce32
-    - buf.build/opencensus/opencensus
-    - buf.build/beta/prometheus
-    - buf.build/opentelemetry/opentelemetry
-    - buf.build/gogo/protobuf
-    - buf.build/cncf/xds
+- buf.build/googleapis/googleapis:62f35d8aed1149c291d606d958a7ce32
+- buf.build/opencensus/opencensus
+- buf.build/beta/prometheus
+- buf.build/opentelemetry/opentelemetry
+- buf.build/gogo/protobuf
+- buf.build/cncf/xds
 breaking:
   ignore_unstable_packages: true
   use:
-    - FIELD_SAME_ONEOF
-    - FIELD_SAME_JSON_NAME
-    - FIELD_SAME_NAME
-    - FIELD_SAME_TYPE
-    - FIELD_SAME_LABEL
-    - FILE_SAME_PACKAGE
-    - FIELD_NO_DELETE_UNLESS_NUMBER_RESERVED
-    - FIELD_NO_DELETE_UNLESS_NAME_RESERVED
+  - FIELD_SAME_ONEOF
+  - FIELD_SAME_JSON_NAME
+  - FIELD_SAME_NAME
+  - FIELD_SAME_TYPE
+  - FIELD_SAME_LABEL
+  - FILE_SAME_PACKAGE
+  - FIELD_NO_DELETE_UNLESS_NUMBER_RESERVED
+  - FIELD_NO_DELETE_UNLESS_NAME_RESERVED
 lint:
   use:
   - IMPORT_USED

changelogs/1.13.0.yaml

@@ -181,7 +181,7 @@ changes:
     added initial support for :ref:`UDP proxy <config_udp_listener_filters_udp_proxy>`.
 
 deprecated:
-- area:  tracing
+- area: tracing
   change: |
     The ``request_headers_for_tags`` field in :ref:`HTTP connection manager
     <envoy_api_msg_config.filter.network.http_connection_manager.v2.HttpConnectionManager.Tracing>`

changelogs/1.19.5.yaml

@@ -16,4 +16,3 @@ bug_fixes:
 - area: router
   change: |
     fixed CVE-2022-29227 which caused an internal redirect crash for requests with body/trailers. Envoy would previously crash in some cases when processing internal redirects for requests with bodies or trailers if the redirect prompts an Envoy-generated local reply.
-

changelogs/1.20.4.yaml

@@ -21,4 +21,3 @@ bug_fixes:
 - area: router
   change: |
     fixed CVE-2022-29227 which caused an internal redirect crash for requests with body/trailers. Envoy would previously crash in some cases when processing internal redirects for requests with bodies or trailers if the redirect prompts an Envoy-generated local reply.
-

changelogs/1.20.5.yaml

@@ -4,4 +4,3 @@ bug_fixes:
 - area: docker
   change: |
     update Docker images (``distroless`` -> ``d65ac1a``) to resolve CVE issues in container packages.
-

changelogs/1.20.6.yaml

@@ -4,4 +4,3 @@ bug_fixes:
 - area: ci
   change: |
     fix disk space issue that have prevented publication.
-

changelogs/1.20.7.yaml

@@ -4,4 +4,3 @@ bug_fixes:
 - area: docker
   change: |
     update Docker images (``distroless`` -> ``49d2923f35d6``) to resolve CVE issues in container packages.
-

changelogs/1.21.2.yaml

@@ -7,4 +7,3 @@ minor_behavior_changes:
 - area: perf
   change: |
     ssl contexts are now tracked without scan based garbage collection and greatly improved the performance on secret update.
-

changelogs/1.21.3.yaml

@@ -16,4 +16,3 @@ bug_fixes:
 - area: router
   change: |
     fixed CVE-2022-29227 which caused an internal redirect crash for requests with body/trailers. Envoy would previously crash in some cases when processing internal redirects for requests with bodies or trailers if the redirect prompts an Envoy-generated local reply.
-

changelogs/1.21.4.yaml

@@ -9,4 +9,3 @@ bug_fixes:
 - area: docker
   change: |
     update Docker images (``distroless`` -> ``d65ac1a``) to resolve CVE issues in container packages.
-

changelogs/1.21.5.yaml

@@ -4,4 +4,3 @@ bug_fixes:
 - area: docker
   change: |
     update Docker images (``distroless`` -> ``49d2923f35d6``) to resolve CVE issues in container packages.
-

changelogs/1.22.1.yaml

@@ -16,4 +16,3 @@ bug_fixes:
 - area: router
   change: |
     fixed CVE-2022-29227 which caused an internal redirect crash for requests with body/trailers. Envoy would previously crash in some cases when processing internal redirects for requests with bodies or trailers if the redirect prompts an Envoy-generated local reply.
-

changelogs/1.22.2.yaml

@@ -4,4 +4,3 @@ bug_fixes:
 - area: ci
   change: |
     fixes/workarounds for CI that prevented publication of version 1.22.1.
-

changelogs/1.22.3.yaml

@@ -4,4 +4,3 @@ bug_fixes:
 - area: docker
   change: |
     update Docker images (``distroless`` -> ``49d2923f35d6``) to resolve CVE issues in container packages.
-

changelogs/1.22.4.yaml

@@ -4,4 +4,3 @@ bug_fixes:
 - area: repo
   change: |
     fix version to resolve release issue.
-

changelogs/1.22.5.yaml

@@ -10,4 +10,3 @@ bug_fixes:
 - area: transport_socket
   change: |
     fixed a bug that prevented the tcp stats to be retrieved when running on kernels different than the kernel where Envoy was built.
-

changelogs/1.23.0.yaml

@@ -423,4 +423,3 @@ deprecated:
   change: |
     deprecated :ref:`inline_code <envoy_v3_api_field_extensions.filters.http.lua.v3.Lua.inline_code>`. Please use
     :ref:`default_source_code <envoy_v3_api_field_extensions.filters.http.lua.v3.Lua.default_source_code>`.
-

changelogs/1.23.1.yaml

@@ -4,4 +4,3 @@ bug_fixes:
 - area: listener
   change: |
     fixed a bug that doesn't handle of an update for a listener with IPv4-mapped address correctly and that will lead to a memory leak.
-

changelogs/1.23.2.yaml

@@ -5,4 +5,3 @@ bug_fixes:
   change: |
     fixed a bug causing response headers set by a Lua script to not be sent in the response (https://github.com/envoyproxy/envoy/issues/22401).
     This bug was introduced in Envoy v1.23.0.
-

changelogs/1.24.0.yaml

@@ -310,4 +310,3 @@ deprecated:
     :ref:`Route.typed_per_filter_config<envoy_v3_api_field_config.route.v3.Route.typed_per_filter_config>` or
     :ref:`WeightedCluster.ClusterWeight.typed_per_filter_config<envoy_v3_api_field_config.route.v3.WeightedCluster.ClusterWeight.typed_per_filter_config>`
     to configure the CORS HTTP filter by the type :ref:`CorsPolicy in filter <envoy_v3_api_msg_extensions.filters.http.cors.v3.CorsPolicy>`.
-

changelogs/current.yaml

@@ -26,34 +26,33 @@ bug_fixes:
 
 removed_config_or_runtime:
 # *Normally occurs at the end of the* :ref:`deprecation period <deprecated>`
-
-  - area: eds
-    change: |
-      removed ``envoy.reloadable_features.support_locality_update_on_eds_cluster_endpoints`` and legacy code paths.
-  - area: listener
-    change: |
-      removed ``envoy.reloadable_features.strict_check_on_ipv4_compat`` and legacy code paths.
-  - area: http
-    change: |
-      removed ``envoy.reloadable_features.deprecate_global_ints`` and legacy code paths.
-  - area: http
-    change: |
-      removed ``envoy.reloadable_features.allow_adding_content_type_in_local_replies`` and legacy code paths.
-  - area: http
-    change: |
-      removed ``envoy.reloadable_features.allow_upstream_inline_write`` and legacy code paths.
-  - area: http
-    change: |
-      removed ``envoy.reloadable_features.append_or_truncate`` and legacy code paths.
-  - area: http
-    change: |
-      removed ``envoy.reloadable_features.use_new_codec_wrapper`` and legacy code paths.
-      removed ``envoy.reloadable_features.append_to_accept_content_encoding_only_once`` and legacy code paths.
-      removed ``envoy.reloadable_features.http1_lazy_read_disable`` and legacy code paths.
-  - area: http
-    change: |
-      removed ``envoy.reloadable_features.http_100_continue_case_insensitive`` and legacy code paths.
-      removed ``envoy.reloadable_features.override_request_timeout_by_gateway_timeout`` and legacy code paths.
+- area: eds
+  change: |
+    removed ``envoy.reloadable_features.support_locality_update_on_eds_cluster_endpoints`` and legacy code paths.
+- area: listener
+  change: |
+    removed ``envoy.reloadable_features.strict_check_on_ipv4_compat`` and legacy code paths.
+- area: http
+  change: |
+    removed ``envoy.reloadable_features.deprecate_global_ints`` and legacy code paths.
+- area: http
+  change: |
+    removed ``envoy.reloadable_features.allow_adding_content_type_in_local_replies`` and legacy code paths.
+- area: http
+  change: |
+    removed ``envoy.reloadable_features.allow_upstream_inline_write`` and legacy code paths.
+- area: http
+  change: |
+    removed ``envoy.reloadable_features.append_or_truncate`` and legacy code paths.
+- area: http
+  change: |
+    removed ``envoy.reloadable_features.use_new_codec_wrapper`` and legacy code paths.
+    removed ``envoy.reloadable_features.append_to_accept_content_encoding_only_once`` and legacy code paths.
+    removed ``envoy.reloadable_features.http1_lazy_read_disable`` and legacy code paths.
+- area: http
+  change: |
+    removed ``envoy.reloadable_features.http_100_continue_case_insensitive`` and legacy code paths.
+    removed ``envoy.reloadable_features.override_request_timeout_by_gateway_timeout`` and legacy code paths.
 
 new_features:
 - area: generic_proxy

configs/encapsulate_http_in_http2_connect.yaml

@@ -1,9 +1,9 @@
 # This configuration takes incoming HTTP requests on port 10000 and encapsulates it in a CONNECT
 # request which is sent upstream port 10001.
 bootstrap_extensions:
-  - name: envoy.bootstrap.internal_listener
-    typed_config:
-      "@type": type.googleapis.com/envoy.extensions.bootstrap.internal_listener.v3.InternalListener
+- name: envoy.bootstrap.internal_listener
+  typed_config:
+    "@type": type.googleapis.com/envoy.extensions.bootstrap.internal_listener.v3.InternalListener
 static_resources:
   listeners:
   - name: http

configs/internal_listener_proxy.yaml

@@ -1,9 +1,9 @@
 # This configuration listens on port 9999 and creates TCP connections to port 10000 using an
 # intermediate internal listener.
 bootstrap_extensions:
-  - name: envoy.bootstrap.internal_listener
-    typed_config:
-      "@type": type.googleapis.com/envoy.extensions.bootstrap.internal_listener.v3.InternalListener
+- name: envoy.bootstrap.internal_listener
+  typed_config:
+    "@type": type.googleapis.com/envoy.extensions.bootstrap.internal_listener.v3.InternalListener
 static_resources:
   listeners:
   - name: ingress

configs/terminate_http1_connect.yaml

@@ -36,9 +36,9 @@ static_resources:
                   connect_matcher:
                     {}
                   headers:
-                    - name: foo
-                      string_match:
-                        exact: bar
+                  - name: foo
+                    string_match:
+                      exact: bar
                 route:
                   cluster: local_original_dst
                   upgrade_configs:

configs/terminate_http_in_http2_connect.yaml

@@ -1,9 +1,9 @@
 # This configuration terminates h2 CONNECT on port 10001 and then chains an HTTP filter that always responds with 200 using
 # an internal listener.
 bootstrap_extensions:
-  - name: envoy.bootstrap.internal_listener
-    typed_config:
-      "@type": type.googleapis.com/envoy.extensions.bootstrap.internal_listener.v3.InternalListener
+- name: envoy.bootstrap.internal_listener
+  typed_config:
+    "@type": type.googleapis.com/envoy.extensions.bootstrap.internal_listener.v3.InternalListener
 static_resources:
   listeners:
   - name: listener_0

configs/upstream-filters.yaml

@@ -59,21 +59,20 @@ static_resources:
           http2_protocol_options:
             {}
         http_filters:
-          - name: buffer
-            typed_config:
-              "@type": type.googleapis.com/envoy.extensions.filters.http.buffer.v3.Buffer
-              max_request_bytes: 5242880
-          - name: envoy.filters.http.upstream_codec
-            typed_config:
-              "@type": type.googleapis.com/envoy.extensions.filters.http.upstream_codec.v3.UpstreamCodec
+        - name: buffer
+          typed_config:
+            "@type": type.googleapis.com/envoy.extensions.filters.http.buffer.v3.Buffer
+            max_request_bytes: 5242880
+        - name: envoy.filters.http.upstream_codec
+          typed_config:
+            "@type": type.googleapis.com/envoy.extensions.filters.http.upstream_codec.v3.UpstreamCodec
     transport_socket:
       name: envoy.transport_sockets.tls
       typed_config:
         "@type": type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
         sni: www.envoyproxy.io
 layered_runtime:
   layers:
-    - name: static_layer
-      static_layer:
-        envoy.reloadable_features.allow_upstream_filters: true
-
+  - name: static_layer
+    static_layer:
+      envoy.reloadable_features.allow_upstream_filters: true

distribution/distros.yaml

@@ -1,4 +1,3 @@
-
 debian_bullseye:
   image: debian:bullseye-slim
   ext: bullseye.changes

docs/root/configuration/http/http_filters/_include/admission-control-filter.yaml

@@ -1,4 +1,3 @@
-
 static_resources:
   listeners:
   - address:
@@ -54,8 +53,8 @@ static_resources:
               - '*'
               name: local_service
               routes:
-              - match: { prefix: "/" }
-                route: { cluster: default_service }
+              - match: {prefix: "/"}
+                route: {cluster: default_service}
   clusters:
   - name: default_service
     load_assignment:

docs/root/configuration/http/http_filters/_include/header-to-metadata-filter.yaml

@@ -49,10 +49,10 @@ static_resources:
     lb_subset_config:
       fallback_policy: ANY_ENDPOINT
       subset_selectors:
-        - keys:
-            - default
-        - keys:
-            - version
+      - keys:
+        - default
+      - keys:
+        - version
     load_assignment:
       cluster_name: versioned-cluster
       endpoints:

docs/root/configuration/http/http_filters/_include/local-rate-limit-global-configuration.yaml

@@ -30,10 +30,10 @@ static_resources:
                   numerator: 100
                   denominator: HUNDRED
               response_headers_to_add:
-                - append_action: OVERWRITE_IF_EXISTS_OR_ADD
-                  header:
-                    key: x-local-rate-limit
-                    value: 'true'
+              - append_action: OVERWRITE_IF_EXISTS_OR_ADD
+                header:
+                  key: x-local-rate-limit
+                  value: 'true'
               local_rate_limit_per_downstream_connection: false
           - name: envoy.filters.http.router
             typed_config:
@@ -44,8 +44,8 @@ static_resources:
             - name: local_service
               domains: ["*"]
               routes:
-              - match: { prefix: "/" }
-                route: { cluster: default_service }
+              - match: {prefix: "/"}
+                route: {cluster: default_service}
   clusters:
   - name: default_service
     load_assignment: