gloo

New Features

• Expose Envoy's OCSP Stapling support through two new fields: ocsp_staple and ocsp_staple_policy. OCSP responses can be stored in TLS secrets through glooctl create secret tls, or by manually storing the OCSP response in a k8s tls secret under the data field: tls.ocsp-staple. The tls.ocsp-staple secret field name is subject to change, and is currently based off of the naming used by cert-manager in this WIP PR. (https://github.com/solo-io/gloo/issues/5605)

Fixes

• Adds regex validation to gloo.solo.io.RouteOptions.prefixRewrite and gloo.solo.io.RouteOptions.hostRewritePathRegex to prevent leaking invalid regex to envoy (https://github.com/solo-io/gloo/issues/8091)
• Added the ability to create EncryptionSecrets via glooctl create secret. (https://github.com/solo-io/gloo/issues/8094)

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.25.6-patch1.
• solo-io/envoy-gloo has been upgraded to 1.25.4-patch3.

New Features

• Expose Envoy's OCSP Stapling support through two new fields: ocsp_staple and ocsp_staple_policy. OCSP responses can be stored in TLS secrets through glooctl create secret tls, or by manually storing the OCSP response in a k8s tls secret under the data field: tls.ocsp-staple. The tls.ocsp-staple secret field name is subject to change, and is currently based off of the naming used by cert-manager in this WIP PR. (https://github.com/solo-io/gloo/issues/5605)

Fixes

• Fixes a bug which prevented users from using resource-based policies to invoke cross-account lambda functions. (https://github.com/solo-io/gloo/issues/7965)

Dependency Bumps

• linux/alpine has been upgraded to 3.17.3.
• solo-io/envoy-gloo has been upgraded to v1.21.5-patch2.

Dependency Bumps

• bitnami/kubectl has been upgraded to 1.25.9.
• solo-io/envoy-gloo has been upgraded to v1.25.6-patch1.

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.23.9-patch1.

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.23.9-patch1.

Fixes

• Adding TLS support for extauth Grpc passthrough. (https://github.com/solo-io/gloo/issues/7663)

This release contained no user-facing changes.

Fixes

• Check go version before building docker images, other small fixes (https://github.com/solo-io/gloo/issues/7926)

This release contained no user-facing changes.

This release contained no user-facing changes.

This release contained no user-facing changes.

Dependency Bumps

• linux/alpine has been upgraded to 3.17.2.

This release contained no user-facing changes.

This release contained no user-facing changes.

This release contained no user-facing changes.

Helm Changes

• Expose settings.devMode in the helm templates and expose gloo debug port when set to true at install time (https://github.com/solo-io/solo-projects/issues/4169)

New Features

• (Enterprise Only) Introduce ability to configure timeouts for individual resolutions within a GraphQL query. Additionally, default the resolver timeout to that configured on the upstream, if any. The per-resolution timeout will overwrite the upstream timeout, and if neither are set then the default timeout of 1 second will be applied. (https://github.com/solo-io/gloo/issues/7950)
• Added the ability to create EncryptionSecrets via glooctl create secret. (https://github.com/solo-io/gloo/issues/8094)

Fixes

• Updating documentation around status metrics to provide more details on their use (https://github.com/solo-io/solo-projects/issues/4169)

Fixes

• To give users time to migrate, discovery does not overwrite the old gRPC upstream API with the new one. (https://github.com/solo-io/gloo/issues/7983)

Fixes

• To give users time to migrate, discovery does not overwrite the old gRPC upstream API with the new one. (https://github.com/solo-io/gloo/issues/7983)