test: run conformance and e2e with debounce enabled

Add a debounce profile that turns on reconcile debouncing at the shipped
defaults, and a conformance and an e2e matrix entry that run against it,
so holding a burst of resource changes before reconciling is covered by
the existing suites rather than only by unit tests.

Conformance configures Envoy Gateway from the helm values profile, while
e2e additionally applies the envoy-gateway-config ConfigMap, so both
files are needed for the profile to take effect in both suites.

Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com>
Signed-off-by: Huabing (Robin) Zhao <huabing@tetrate.io>

Author: zhaohuabing

.github/workflows/build_and_test.yaml

@@ -190,6 +190,10 @@ jobs:
           ipFamily: ipv4
           profile: merge-backends
           gwapiChannel: experimental
+        - version: v1.36.1
+          ipFamily: ipv4
+          profile: debounce
+          gwapiChannel: experimental
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
     - uses: ./tools/github-actions/setup-deps
@@ -258,6 +262,9 @@ jobs:
         - version: v1.36.1
           ipFamily: ipv4
           profile: watch-namespaces
+        - version: v1.36.1
+          ipFamily: ipv4
+          profile: debounce
 
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1

test/config/envoy-gateaway-config/debounce.yaml

@@ -0,0 +1,45 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: envoy-gateway-config
+  namespace: envoy-gateway-system
+data:
+  envoy-gateway.yaml: |
+    apiVersion: gateway.envoyproxy.io/v1alpha1
+    kind: EnvoyGateway
+    debounce:
+      enable: true
+      after: 100ms
+      max: 10s
+    provider:
+      type: Kubernetes
+    gateway:
+      controllerName: gateway.envoyproxy.io/gatewayclass-controller
+    extensionApis:
+      enableEnvoyPatchPolicy: true
+      enableBackend: true
+      enableLua: true
+      enableSDSSecretRef: true
+    gatewayAPI:
+      enabled: [XListenerSet]
+    rateLimit:
+      backend:
+        type: Redis
+        redis:
+          url: redis.redis-system.svc.cluster.local:6379
+    envoyProxy:
+      provider:
+        kubernetes:
+          envoyDeployment:
+            container:
+              image: envoyproxy/envoy:invalid-tag
+    telemetry:
+      traces:
+        sink:
+          type: OpenTelemetry
+          openTelemetry:
+            host: otel-collector.monitoring.svc.cluster.local
+            port: 4317
+            protocol: grpc
+        samplingRate:
+          numerator: 100

test/config/helm/debounce.yaml

@@ -0,0 +1,12 @@
+# Runs the suite with reconcile debouncing enabled, to confirm that holding a
+# burst of resource changes before reconciling does not change the outcome of
+# any conformance or e2e case.
+#
+# after and max are the shipped defaults, set explicitly so the matrix documents
+# the configuration under test.
+config:
+  envoyGateway:
+    debounce:
+      enable: true
+      after: 100ms
+      max: 10s