gloo

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to 1.23.7-patch1.
• alpine/alpine has been upgraded to 3.17.3.

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.25.4-patch1.
• alpine/alpine has been upgraded to 3.17.3.

This release contained no user-facing changes.

This release build failed.

Dependency Bumps

• solo-io/skv2 has been upgraded to v0.29.2.
• helm/helm has been upgraded to v3.11.2.
• k8s.io/api has been upgraded to v0.25.8.
• k8s.io/apiextensions-apiserver has been upgraded to v0.25.8.
• k8s.io/apimachinery has been upgraded to v0.25.8.
• k8s.io/cli-runtime has been upgraded to v0.25.8.
• k8s.io/client-go has been upgraded to v0.25.8.
• k8s.io/code-generator has been upgraded to v0.25.8.
• k8s.io/component-base has been upgraded to v0.25.8.
• k8s.io/kubectl has been upgraded to v0.25.8.
• k8s.io/metrics has been upgraded to v0.25.8.
• k8s.io/kube-openapi has been upgraded to v0.0.0-20220803162953-67bda5d908f1.

Breaking Changes

• Adds support for running Gloo Edge (OSS) on Kubernetes 1.25 and removes support for 1.22 and below. Notable changes include PodDisruptionBudget moving from policy/v1beta1 to policy/v1, and the gloo helm chart OCI registry path changing from gcr.io/solo-public/gloo-helm to gcr.io/solo-public/gloo-helm/gloo. (https://github.com/solo-io/gloo/issues/6833)

New Features

• Setting global.glooRbac.namespaced=true now also constrains the certgen jobs access permissions to secrets from the entire cluster to just those in the gloo install namespace. Also the original role (gloo-gateway-secret-create-vwc-update) was split into two separate roles (gloo-gateway-secret-create and gloo-gateway-vwc-update) as gloo-gateway-vwc-update needs to access cluster scoped validatingWebhookConfigs. gloo-gateway-secret-create-vwc-update no longer exists. (https://github.com/solo-io/gloo/issues/5960)

Fixes

• In the Settings object, you can configure gateway.isolateVirtualHostsBySslConfig to ensure that VirtualHosts, secured with SslConfig, are published to unique filter chains. We attempt to merge VirtualServices which share the same SslConfiguration. There was a bug in the merge logic that caused VirtualServices to be dropped from the Proxy, and only the last matching VirtualService would remain, if you were using isolateVirtualHostsBySslConfig=true. (https://github.com/solo-io/gloo/issues/7739)

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.25.1-patch2.
• solo-io/envoy-gloo has been upgraded to v1.25.1-patch3.

Breaking Changes

• Discovery creates upstreams for GRPC services using the new API. Mappings created on VirtualServices using instructions from the grpc_to_rest guide will not be used in conjunction with the new API. (https://github.com/solo-io/gloo/issues/7487)
• responseTransformation will no longer overwrite the content-type header to text/html. (https://github.com/solo-io/solo-projects/issues/4438)

New Features

• Add ext-auth definition/configuration for HMAC Authentication (https://github.com/solo-io/gloo/issues/7472)
• Updating the API to provide GraphQL Service Specs for Upstreams. (https://github.com/solo-io/gloo/issues/7685)
• Add the existing GrpcJsonTranscoder API to the upstream ServiceSpec to allow configuring more of the options supported by Envoy's GrpcJsonTranscoder filter with configuration on upstreams and to allow directly modifying proto descriptors on upstreams. (https://github.com/solo-io/gloo/issues/7480)
• responseTransformation will now extract headers and status code from response body in addition to the body. (https://github.com/solo-io/solo-projects/issues/4438)

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.21.5-patch1.
• golang.org/x/mod has been upgraded to v0.9.0.
• golang.org/x/tools has been upgraded to v0.7.0.

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.23.3-patch3.
• solo-io/envoy-gloo has been upgraded to v1.23.3-patch2.
• golang.org/x/mod has been upgraded to v0.9.0.
• golang.org/x/tools has been upgraded to v0.7.0.

Fixes

• Speed up the istio integration plugin translation time by reading from the input snapshot instead of using an upstream client. (https://github.com/solo-io/gloo/issues/7960)

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.23.3-patch2.
• golang.org/x/mod has been upgraded to v0.9.0.
• golang.org/x/tools has been upgraded to v0.7.0.

Fixes

• Speed up the istio integration plugin translation time by reading from the input snapshot instead of using an upstream client. (https://github.com/solo-io/gloo/issues/7960)

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.21.5-patch1.
• golang.org/x/mod has been upgraded to v0.9.0.
• golang.org/x/tools has been upgraded to v0.7.0.

Dependency Bumps

• alpine/alpine has been upgraded to 3.17.2.
• golang.org/x/tools has been upgraded to v0.7.0.

New Features

• Add connect matcher, add CONNECT upgrade type to hcm and route (https://github.com/solo-io/gloo/issues/7914)

Fixes

• Speed up the istio integration plugin translation time by reading from the input snapshot instead of using an upstream client. (https://github.com/solo-io/gloo/issues/7960)
• Use k8s getter for getting service instead of using for loop by lister to improve performance (https://github.com/solo-io/gloo/issues/7920)

Dependency Bumps

• alpine/alpine has been upgraded to 3.17.2.

Dependency Bumps

• alpine/alpine has been upgraded to 3.17.2.

This release contained no user-facing changes.

Dependency Bumps

• golang/go has been upgraded to v1.18.6.

Dependency Bumps

• golang/go has been upgraded to v1.18.6.

Fixes

• Expose config.core.v3.Cluster.SlowStartConfig for RoundRobin and LeastRequest load balancers. Requires CRD update to be able to use. (https://github.com/solo-io/gloo/issues/7807)

Dependency Bumps

• golang/go has been upgraded to v1.20.1.
• onsi/ginkgo/v2 has been upgraded to v2.8.1.

New Features

• Expose config.core.v3.Cluster.SlowStartConfig for RoundRobin and LeastRequest load balancers. (https://github.com/solo-io/gloo/issues/7807)

Dependency Bumps

• alpine/alpine has been upgraded to 3.17.2.

Dependency Bumps

• alpine/alpine has been upgraded to 3.17.2.

Dependency Bumps

• solo-io/go-list-licenses has been upgraded to v0.1.4.
• solo-io/go-utils has been upgraded to v0.24.0.
• solo-io/k8s-utils has been upgraded to v0.3.0.
• solo-io/protoc-gen-ext has been upgraded to v0.0.18.
• solo-io/solo-kit has been upgraded to v0.31.0.
• onsi/ginkgo/v2 has been upgraded to v2.5.0.
• onsi/gomega has been upgraded to v1.24.1.
• k8s.io/apiextensions-apiserver has been upgraded to v0.23.16.
• k8s.io/apimachinery has been upgraded to v0.23.16.
• k8s.io/client-go has been upgraded to v0.23.16.
• k8s.io/api has been upgraded to v0.23.16.
• k8s.io/code-generator has been upgraded to v0.23.16.
• k8s.io/kubectl has been upgraded to v0.23.16.
• sigs.k8s.io/controller-runtime has been upgraded to v0.11.2.

Dependency Bumps

• alpine/alpine has been upgraded to 3.17.2.

New Features

• Extract the generated files from ssl.proto into their own go package. This is a breaking change. This will not affect the regular operation of gloo. Rather, it will impact consumers of the solo-apis repository, as paths will have changed. (https://github.com/solo-io/gloo/issues/7693)
• Allow configured DynamicForwardProxies to use TLS Origination (https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/cluster/v3/cluster.proto#envoy-v3-api-field-config-cluster-v3-cluster-transport-socket) via a newly exposed field: gateway.spec.httpGateway.options.dynamicForwardProxy.sslConfig (https://github.com/solo-io/gloo/issues/7693)