feat: AFD-first-party Layer-7 GLB + WAF + Private Link (SFI-NS253) - #373

Draft

Ramkumar Chinchani (rchincha) wants to merge 40 commits into

rchincha:rchinchani/afd-first-party-proposal

Commits on Jul 31, 2026

docs(first-party): add AFD + WAF + Private Link GLB proposal for SFI-NS253

Ramkumar Chinchani (rchincha)
and
Copilot
committed
e55e9f4
docs(first-party): add implementation plan and scope of changes (proposal 002)

Ramkumar Chinchani (rchincha)
and
Copilot
committed
71f880f
docs(first-party): document east-west compatibility and L4 scoping

Ramkumar Chinchani (rchincha)
and
Copilot
committed
7f259c3
docs(first-party): add pre-implementation checklist (proposal 003)

Ramkumar Chinchani (rchincha)
and
Copilot
committed
281eb75
docs(first-party): clarify Premium-only + traffic isolation, resolve profile scope

Ramkumar Chinchani (rchincha)
and
Copilot
committed
1240735
docs(first-party): introduce complianceMode Spec field; resolve WAF requiredness (1.2)

Ramkumar Chinchani (rchincha)
and
Copilot
committed
7441aa8
feat(hub): POC for Azure Front Door (AFD) controllers behind --enable-frontdoor-feature

Ramkumar Chinchani (rchincha)
and
Copilot
committed
5545a8d
docs(first-party): use annotation+inference for AFD export mode; preserve mcs-api parity

Ramkumar Chinchani (rchincha)
and
Copilot
committed
45fd621
docs(first-party): support AKS Automatic; document AFD/ATM coexistence

Ramkumar Chinchani (rchincha)
and
Copilot
committed
824d063
docs(first-party): reconcile proposals with cb02d14 POC
Ramkumar Chinchani (rchincha)
committed
e3bbcf0
docs, comments: clarify POC vs. target design for AFD
Ramkumar Chinchani (rchincha)
committed
8388578
refactor(hub): tighten FrontDoorProfileSpec.Sku to Premium-only

Ramkumar Chinchani (rchincha)
and
Copilot
committed
d30ae87
chore(crd): regenerate FrontDoorProfile CRD after Sku tightening

Ramkumar Chinchani (rchincha)
and
Copilot
committed
ca87f83
refactor(hub): split AFD controllers into cmd/hub-afd-controller-manager

Ramkumar Chinchani (rchincha)
and
Copilot
committed
46ba087
build: dockerfile + makefile targets for hub-afd-controller-manager

Ramkumar Chinchani (rchincha)
and
Copilot
committed
6c85704
chart: introduce charts/hub-afd-controller-manager sibling chart

Ramkumar Chinchani (rchincha)
and
Copilot
committed
8e7d57f
deps(armcdn): bump Front Door SDK from v1.1.1 to v2.2.0

Ramkumar Chinchani (rchincha)
and
Copilot
committed
eac608a
test(net-crd-installer): include AFD CRDs in expected hub-mode list

Ramkumar Chinchani (rchincha)
and
Copilot
committed
9e3c53f
test(hub/afd): envtest suites + fake armcdn provider for AFD controllers

Ramkumar Chinchani (rchincha)
and
Copilot
committed
d14691a
feat(api): add ComplianceMode + WAFPolicy fields to FrontDoorProfile

Ramkumar Chinchani (rchincha)
and
Copilot
committed
27fa25f
chore(crd): regenerate DeepCopy + CRD after ComplianceMode + WAFPolicy

Ramkumar Chinchani (rchincha)
and
Copilot
committed
b27667c
feat(azurefrontdoor): add WAFPolicies + SecurityPolicies clients to bundle

Ramkumar Chinchani (rchincha)
and
Copilot
committed
92edd52
feat(hub/frontdoorprofile): enforce WAFPolicy + ComplianceMode via SecurityPolicy attach

Ramkumar Chinchani (rchincha)
and
Copilot
committed
94701b4
test(hub/frontdoorprofile): envtest specs for WAF happy / NotFound / SFI-Detection

Ramkumar Chinchani (rchincha)
and
Copilot
committed
da9608b
feat(objectmeta): add export-mode annotation + ExtractExportModeFromServiceExport

Ramkumar Chinchani (rchincha)
and
Copilot
committed
d526a92
feat(api): extend InternalServiceExportSpec with ExportMode + PrivateLinkServiceResourceID

Ramkumar Chinchani (rchincha)
and
Copilot
committed
29a42ce
feat(member/serviceexport): wire ExportMode + PLS lookup for L7-FrontDoor

Ramkumar Chinchani (rchincha)
and
Copilot
committed
2faf009
test(member/serviceexport): cover ExportMode + PLS lookup paths

Ramkumar Chinchani (rchincha)
and
Copilot
committed
a546086
feat(api): add FrontDoorBackend v1alpha1 CRD

Ramkumar Chinchani (rchincha)
and
Copilot
committed
caab8c2
feat(azurefrontdoor): add OriginGroups + Origins clients to bundle

Ramkumar Chinchani (rchincha)
and
Copilot
committed
1a2be77
feat(hub/frontdoorbackend): add reconciler for OriginGroup + Origins

Ramkumar Chinchani (rchincha)
and
Copilot
committed
ae67237
docs(first-party/001): add competitive context (GKE/EKS/AKS parity table)

Ramkumar Chinchani (rchincha)
and
Copilot
committed
2b8c14f
feat(hub/frontdoorbackend): AFD/ATM coexistence guard (Conflict reason)

Ramkumar Chinchani (rchincha)
and
Copilot
committed
ec24f0f
test(hub/frontdoorbackend): envtest specs + fake AFD origin/originGroup providers

Ramkumar Chinchani (rchincha)
and
Copilot
committed
8c505a5
docs(first-party): status-update callouts (session head 629644b) + breadcrumb Addendum 3

Ramkumar Chinchani (rchincha)
and
Copilot
committed
e278444
chore(lint,docs): resolve golangci-lint findings and dead-link errors from PR #373

Ramkumar Chinchani (rchincha)
and
Copilot
committed
3d76a62
docs(first-party): add POC runbook and Tier-0 smoke-test script

Ramkumar Chinchani (rchincha)
and
Copilot
committed
c469d2c

Commits on Aug 3, 2026

test: stabilize traffic manager backend events

Ramkumar Chinchani (rchincha)
and
Copilot
committed
3ca9e1b
ci: ignore rate-limited clusterloader link

Ramkumar Chinchani (rchincha)
and
Copilot
committed
0093965

Commits on Aug 7, 2026

docs: clarify AFD competitive landscape

Ramkumar Chinchani (rchincha)
and
Copilot
committed
b69a33d