The Gateway API BackendTrafficPolicy for KAS sets useClientProtocol so
Envoy forwards the cross-served gRPC/WSS agent traffic as HTTP/2. The
policy targeted the entire gitlab-kas HTTPRoute, which also carried
the Kubernetes API proxy path (/k8s-proxy, port 8154). That backend
speaks only HTTP/1.1, so forcing cleartext HTTP/2 (h2c) onto it broke
kubectl requests.

Move the /k8s-proxy path to a dedicated gitlab-kas-k8s-proxy HTTPRoute
that the BackendTrafficPolicy does not target, letting Envoy downgrade
HTTP/2 client connections to HTTP/1.1 before reaching the proxy. The
agent (port 8150) and workspaces rules stay on gitlab-kas and keep the
policy.

Closes #6557

Changelog: fixed

Backport 10.0: Split KAS k8s-proxy into its own HTTPRoute

See merge request !5176

Merged-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Stefan Bordei <sbordei@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Reviewed-by: GitLab Duo <gitlab-duo@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Set a 2h default timeout on proxied agent requests.
Based on a Duo suggestion from:
  !5175 (comment 3540114159)

Relates #6557

Backport 10.0: Ensure long living Relay streams do not timeout

See merge request !5181

Merged-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Make webservice ClientTrafficPolicy specs overridable

Closes #6571

See merge request !5183

Merged-by: Lucas Li <lli@gitlab.com>
Approved-by: Konst Tchernov <ktchernov@gitlab.com>
Approved-by: Lucas Li <lli@gitlab.com>
Reviewed-by: Konst Tchernov <ktchernov@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

(cherry picked from commit d5076fbb)

634b46bd Make webservice ClientTrafficPolicy specs overridable

Co-authored-by: Lucas Li <lli@gitlab.com>

Backport 'cb/ctp-webservice-6571' into '10-0'

See merge request !5199

Merged-by: Lucas Li <lli@gitlab.com>
Approved-by: Lucas Li <lli@gitlab.com>
Reviewed-by: GitLab Duo <gitlab-duo@gitlab.com>
Co-authored-by: João Alexandre Cunha <j.a.cunha@gmail.com>

Closes #6582

Changelog: fixed

See merge request !5200

Merged-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Evan Read <eread@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Reviewed-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Reviewed-by: Evan Read <eread@gitlab.com>
Reviewed-by: GitLab Duo <gitlab-duo@gitlab.com>
Co-authored-by: eakca1 <eakca@gitlab.com>

(cherry picked from commit eb8e6089)

821d7077 Raise HTTP/2 window on webservice Geo/main ClientTrafficPolicy
9bcbe8a5 docs: note --reuse-values skips new HTTP/2 window defaults
16a8c4c2 Clarify main ClientTrafficPolicy HTTP/2 window comment
463a1481 Apply 1 suggestion(s) to 1 file(s)
d7ed927c docs: remove generic --reuse-values note per review

Co-authored-by: João Alexandre Cunha <j.a.cunha@gmail.com>

Backport 'eakca1/geo-envoy-http2-window' into '10-0-stable'

See merge request !5221

Merged-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Reviewed-by: GitLab Duo <gitlab-duo@gitlab.com>
Co-authored-by: João Alexandre Cunha <j.a.cunha@gmail.com>

Closes #6575

Changelog: fixed

See merge request !5196

Merged-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Konst Tchernov <ktchernov@gitlab.com>
Approved-by: Nailia Iskhakova <niskhakova@gitlab.com>
Reviewed-by: Clemens Beck <cbeck@gitlab.com>
Reviewed-by: Konst Tchernov <ktchernov@gitlab.com>
Reviewed-by: GitLab Duo <gitlab-duo@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

(cherry picked from commit ad4e74e9)

f4e68ae7 fix: disable Envoy Gateway request timeouts for webservice
916cbfdf Add upstream timeout defaults via BackendTrafficPolicy
ce9674a2 Update provider requirements docs and BTP test coverage
9908eb3a Address timeout review feedback: helper and docs

Co-authored-by: João Alexandre Cunha <j.a.cunha@gmail.com>

Backport 'cb/disable-webservice-timeouts' into '10-0-stable'

See merge request gitlab-org/charts/gitlab!5222

Merged-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Co-authored-by: João Alexandre Cunha <j.a.cunha@gmail.com>

[ci skip]

[ci skip]