add unix domain socket path length validation

api/v1alpha1/backend_types.go

@@ -115,6 +115,9 @@ type FQDNEndpoint struct {
 // https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/core/v3/address.proto#config-core-v3-pipe
 type UnixSocket struct {
 	// Path defines the unix domain socket path of the backend endpoint.
+	// The path length must not exceed 108 characters.
+	//
+	// +kubebuilder:validation:MaxLength=108
 	Path string `json:"path"`
 }
 

charts/gateway-crds-helm/templates/generated/gateway.envoyproxy.io_backends.yaml

@@ -119,8 +119,10 @@ spec:
                       description: Unix defines the unix domain socket endpoint
                       properties:
                         path:
-                          description: Path defines the unix domain socket path of
-                            the backend endpoint.
+                          description: |-
+                            Path defines the unix domain socket path of the backend endpoint.
+                            The path length must not exceed 108 characters.
+                          maxLength: 108
                           type: string
                       required:
                       - path

charts/gateway-helm/crds/generated/gateway.envoyproxy.io_backends.yaml

@@ -118,8 +118,10 @@ spec:
                       description: Unix defines the unix domain socket endpoint
                       properties:
                         path:
-                          description: Path defines the unix domain socket path of
-                            the backend endpoint.
+                          description: |-
+                            Path defines the unix domain socket path of the backend endpoint.
+                            The path length must not exceed 108 characters.
+                          maxLength: 108
                           type: string
                       required:
                       - path

site/content/en/latest/api/extension_types.md

@@ -4757,7 +4757,7 @@ _Appears in:_
 
 | Field | Type | Required | Default | Description |
 | ---   | ---  | ---      | ---     | ---         |
-| `path` | _string_ |  true  |  | Path defines the unix domain socket path of the backend endpoint. |
+| `path` | _string_ |  true  |  | Path defines the unix domain socket path of the backend endpoint.<br />The path length must not exceed 108 characters. |
 
 
 #### Wasm

test/cel-validation/backend_test.go

@@ -299,6 +299,22 @@ func TestBackend(t *testing.T) {
 			},
 			wantErrors: []string{"TLS settings can only be specified for DynamicResolver backends"},
 		},
+		{
+			desc: "Invalid Unix socket path length",
+			mutate: func(backend *egv1a1.Backend) {
+				backend.Spec = egv1a1.BackendSpec{
+					AppProtocols: []egv1a1.AppProtocolType{egv1a1.AppProtocolTypeH2C},
+					Endpoints: []egv1a1.BackendEndpoint{
+						{
+							Unix: &egv1a1.UnixSocket{
+								Path: "/path/to/a/very/long/unix/socket/path/that/exceeds/the/maximum/allowed/length/of/108/characters/and/should/fail/validation.sock",
+							},
+						},
+					},
+				}
+			},
+			wantErrors: []string{"spec.endpoints[0].unix.path: Too long: may not be more than 108 bytes"},
+		},
 	}
 
 	for _, tc := range cases {

test/helm/gateway-crds-helm/all.out.yaml

@@ -17431,8 +17431,10 @@ spec:
                       description: Unix defines the unix domain socket endpoint
                       properties:
                         path:
-                          description: Path defines the unix domain socket path of
-                            the backend endpoint.
+                          description: |-
+                            Path defines the unix domain socket path of the backend endpoint.
+                            The path length must not exceed 108 characters.
+                          maxLength: 108
                           type: string
                       required:
                       - path

test/helm/gateway-crds-helm/envoy-gateway-crds.out.yaml

@@ -119,8 +119,10 @@ spec:
                       description: Unix defines the unix domain socket endpoint
                       properties:
                         path:
-                          description: Path defines the unix domain socket path of
-                            the backend endpoint.
+                          description: |-
+                            Path defines the unix domain socket path of the backend endpoint.
+                            The path length must not exceed 108 characters.
+                          maxLength: 108
                           type: string
                       required:
                       - path