Allow serve mode when system-internal-tls is enabled by linkvt · Pull Request #16183

Allow serve mode when system-internal-tls is enabled by linkvt · Pull Request #16183 · knative/serving

knative-prow bot added do-not-merge/work-in-progress

Indicates that a PR should not merge because it is a work in progress.

approved

Indicates a PR has been approved by an approver from all required OWNERS files.

size/L

Denotes a PR that changes 100-499 lines, ignoring generated files.

labels

Oct 21, 2025

knative-prow bot added do-not-merge/hold

Indicates that a PR should not merge because someone has issued a /hold command.

and removed approved

Indicates a PR has been approved by an approver from all required OWNERS files.

labels

Oct 31, 2025

linkvt marked this pull request as ready for review

October 31, 2025 13:12

linkvt changed the title ~~Allow using serve mode with system-internal-tls~~ Allow serve mode when system-internal-tls is enabled

Nov 28, 2025

Previously, when system-internal-tls was enabled, the KPA reconciler
would force all traffic through the activator (proxy mode) regardless
of scaling conditions. This prevented the use of serve mode even when
the standard conditions were met (desired scale > 0 and excess burst
capacity >= 0).

This change removes that restriction, allowing serve mode to be used
with TLS based on the normal scaling conditions, improving performance
in TLS-enabled environments.

knative-prow bot added the approved

Indicates a PR has been approved by an approver from all required OWNERS files.

label

Nov 28, 2025