Skip to content

docs(setup): add guide for using custom upstream Envoy images#844

Open
mihir-dixit2k27 wants to merge 1 commit into
kgateway-dev:mainfrom
mihir-dixit2k27:docs/upstream-envoy-image-guide
Open

docs(setup): add guide for using custom upstream Envoy images#844
mihir-dixit2k27 wants to merge 1 commit into
kgateway-dev:mainfrom
mihir-dixit2k27:docs/upstream-envoy-image-guide

Conversation

@mihir-dixit2k27

@mihir-dixit2k27 mihir-dixit2k27 commented Jun 12, 2026

Copy link
Copy Markdown

Description

Adds a user-facing guide for building and using a custom envoy-wrapper imagebased on any upstream Envoy release, so users can apply Envoy CVE fixes orpatch updates without waiting for an official kgateway release.

Motivation: Closes a docs gap from #14193. The capability already shipsin v2.3 (make envoy-wrapper-docker, GatewayParameters.spec.kube.envoyContainer),but was never documented for end users.

What changed:

  • assets/docs/pages/setup/customize/envoy-image.md - the full guide, covering:
  • why plain upstream Envoy images don't work (the wrapper bundles envoyinit and the librust_module.so Dynamic Module), Envoy ABI compatibility rules (patch bumps safe, minor bumps require an SDK pin change), and step-by-step instructions to build, push, and wire in a custom image via GatewayParameters and Gateway. Also covers the cluster-wide default via gatewayClassParametersRefs.
  • Thin version wrappers at content/docs/envoy/main/setup/customize/envoy-image.md and content/docs/envoy/latest/setup/envoy-image.md, following the reuse-shortcode pattern used throughout the site.
  • Card entries added to the relevant _index.md files so the page shows up insection nav under both versions.

Fixes kgateway-dev/kgateway#14193

Change Type

/kind documentation

Changelog

Added a guide for building a custom envoy-wrapper image from any upstream Envoy
release and configuring kgateway to use it via GatewayParameters.





@mihir-dixit2k27 mihir-dixit2k27 force-pushed the docs/upstream-envoy-image-guide branch from 1044eec to 909d0a7 Compare June 12, 2026 16:47
Add a new page under setup/customize/ (main) and setup/ (latest)
explaining how to build a custom envoy-wrapper image on top of any
upstream Envoy release and configure kgateway to use it.

Covers:
- Why plain upstream Envoy images do not work (Dynamic Modules ABI)
- The envoy-wrapper-docker make target and ENVOY_IMAGE / IMAGE_REGISTRY
  / VERSION variables
- The spec.kube.envoyContainer.image CRD field path in GatewayParameters
- Patch-vs-minor ABI compatibility constraints
- Cluster-wide default via gatewayClassParametersRefs Helm value

Also adds card entries to the relevant _index.md files so the page
appears in the section navigation.

Closes kgateway-dev/kgateway#14193

Signed-off-by: Mihir Dixit <dixitmihir1@gmail.com>
@mihir-dixit2k27 mihir-dixit2k27 force-pushed the docs/upstream-envoy-image-guide branch from 909d0a7 to 7faa9bb Compare June 12, 2026 16:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Allow compatibility with upstream envoy releases

1 participant