gloo

Dependency Bumps

• alpine/alpine has been upgraded to 3.17.2.

New Features

• Extract the generated files from ssl.proto into their own go package. This is a breaking change. This will not affect the regular operation of gloo. Rather, it will impact consumers of the solo-apis repository, as paths will have changed. (https://github.com/solo-io/gloo/issues/7693)
• Allow configured DynamicForwardProxies to use TLS Origination (https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/cluster/v3/cluster.proto#envoy-v3-api-field-config-cluster-v3-cluster-transport-socket) via a newly exposed field: gateway.spec.httpGateway.options.dynamicForwardProxy.sslConfig (https://github.com/solo-io/gloo/issues/7693)

This release contained no user-facing changes.

New Features

• Allow configured DynamicForwardProxies to use TLS Origination (https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/cluster/v3/cluster.proto#envoy-v3-api-field-config-cluster-v3-cluster-transport-socket) via a newly exposed field: gateway.spec.httpGateway.options.dynamicForwardProxy.sslConfig (https://github.com/solo-io/gloo/issues/7693)
• Exposes the RespectDnsTtl and DnsRefreshRate fields in the Upstream API. For DnsRefreshRate, If the DNS refresh rate is specified and the cluster type is either STRICT_DNS, or LOGICAL_DNS, this value is used as the cluster’s DNS refresh rate. The RespectDnsTtl is an optional configuration for setting cluster’s DNS refresh rate. If the value is set to true, cluster’s DNS refresh rate will be set to resource record’s TTL which comes from DNS resolution. (https://github.com/solo-io/gloo/issues/6402)
• Expose gateway.validation.webhook.timeoutSeconds as a means of setting timeoutSeconds on the gloo-gateway-validation-webhook (https://github.com/solo-io/gloo/issues/7218)

Dependency Bumps

• alpine/alpine has been upgraded to 3.17.2.

Breaking Changes

• Extract the generated files from ssl.proto into their own go package. This is meant to support a follow-up PR by resolving a circular dependency where ssl can be used in more places. This will not affect the regular operation of gloo. Rather, it will impact consumers of the solo-apis repository, as paths will have changed. (https://github.com/solo-io/gloo/issues/7693)

Helm Changes

• Added the ability to specify the PodSecurityContext for the pod and the SecurityContext for the gateway-proxy, sds, and istio-proxy containers in the gateway-proxy-deployment chart and the SecurityContext in the envoy-sidecar, sds, and gloo containers in the gloo-deployment chart. You can expose access to these values with the following helm values:
  gatewayProxies.gatewayProxy.podTemplate.podSecurityContext
  gatewayProxies.gatewayProxy.podTemplate.glooContainerSecurityContext
  gloo.deployment.podSecurityContext
  gloo.deployment.glooContainerSecurityContext
  global.glooMtls.istioProxy.securityContext
  global.glooMtls.envoy.securityContext
  global.glooMtls.sds.securityContext (https://github.com/solo-io/gloo/issues/7473)

New Features

• Expose config.listener.v3.Listener.ConnectionBalanceConfig as gloo.solo.io.ListenerOptions.connection_balance_config to allow manual balancing of connections between worker threads. (https://github.com/solo-io/gloo/issues/7530)

Fixes

• Add extra gaurd-rails to fault filter for cases with non-nil invalid configuration. This moves the potential failures in the configuration of faultinjectino into the control plane where we report on it rather than risking allowing it through to envoy. (https://github.com/solo-io/gloo/issues/)
• Use Pod IPs for headless services when the gloo deployment's ENABLE_ISTIO_INTEGRATION is true. (https://github.com/solo-io/gloo/issues/7491)
• Fix a bug where the validation webhook server on the gloo pod would still start even if the VALIDATION_MUST_START environment variable was false.
  Now it only starts if it's set to true, or if it is unset, so it acts as it previously has. (https://github.com/solo-io/gloo/issues/7826)
• Makes requestTransformation and unwrapAsAlb/unwrapAsApiGateway Lambda DestinationSpec settings mutually exclusive. This corrects a bug where the Content-Type header would be text/html regardless of the response body metadata when both of these options were configured (https://github.com/solo-io/solo-projects/issues/4434)

Fixes

• Use Pod IPs for headless services when the gloo deployment's ENABLE_ISTIO_INTEGRATION is true. (https://github.com/solo-io/gloo/issues/7491)
• Fix a bug where the validation webhook server on the gloo pod would still start even if the VALIDATION_MUST_START environment variable was false.
  Now it only starts if it's set to true, or if it is unset, so it acts as it previously has. (https://github.com/solo-io/gloo/issues/7826)
• Fix issue with wrong port being used with Istio integration and setting a different TargetPort than the Port. (https://github.com/solo-io/gloo/issues/7298)

Fixes

• Use Pod IPs for headless services when the gloo deployment's ENABLE_ISTIO_INTEGRATION is true. (https://github.com/solo-io/gloo/issues/7491)
• Fix a bug where the validation webhook server on the gloo pod would still start even if the VALIDATION_MUST_START environment variable was false.
  Now it only starts if it's set to true, or if it is unset, so it acts as it previously has. (https://github.com/solo-io/gloo/issues/7826)
• Fix issue with wrong port being used with Istio integration and setting a different TargetPort than the Port. (https://github.com/solo-io/gloo/issues/7298)

This release contained no user-facing changes.

Dependency Bumps

• gopkg.in/yaml.v3 has been upgraded to v3.0.1.

This release contained no user-facing changes.

This release contained no user-facing changes.

This release contained no user-facing changes.

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.24.0-patch2.
• envoyproxy/go-control-plane has been upgraded to v0.11.0.

New Features

• Expose config.core.v3.HealthCheck.HttpHealthCheck.method as v3.HealthCheck.HttpHealthCheck.RequestMethod (https://github.com/solo-io/gloo/issues/7149)

Fixes

• No longer fail validation when specifying query parameters on re-writes. (https://github.com/solo-io/gloo/issues/7715#issuecomment-1410014270)
• Fix issue with wrong port being used with Istio integration and setting a different TargetPort than the Port. (https://github.com/solo-io/gloo/issues/7298)

Helm Changes

• Provide a helm template value gatewayProxies.gatewayProxy.disableCoreDumps which disables core dumps from being written in the event of an Envoy crash (https://github.com/solo-io/gloo/issues/7659)

Fixes

• No longer fail validation when specifying query parameters on re-writes. (https://github.com/solo-io/gloo/issues/7715#issuecomment-1410014270)

Dependency Bumps

• golang/x/net has been upgraded to v0.5.0.

Helm Changes

• Provide a helm template value gatewayProxies.gatewayProxy.disableCoreDumps which disables core dumps from being written in the event of an Envoy crash (https://github.com/solo-io/gloo/issues/7659)

Fixes

• No longer fail validation when specifying query parameters on re-writes. (https://github.com/solo-io/gloo/issues/7715#issuecomment-1410014270)

Fixes

• No longer fail validation when specifying query parameters on re-writes. (https://github.com/solo-io/gloo/issues/7715#issuecomment-1410014270)

Fixes

• No longer fail validation when specifying query parameters on re-writes. (https://github.com/solo-io/gloo/issues/7715#issuecomment-1410014270)

Dependency Bumps

• solo-io/solo-kit has been upgraded to v0.30.9.

Helm Changes

• Add backoffLimit, completions, manualSelector, and parallelism fields to k8s jobs. https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#job-v1-batch (https://github.com/solo-io/gloo/issues/7112)

Fixes

• Exempt dynamic forward proxies from being auto-censure by enabling the replaceInvalidRoutes feature (https://github.com/solo-io/gloo/issues/7668)
• Exempt http tunnels from being auto-censured by enabling the replaceInvalidRoutes feature (https://github.com/solo-io/gloo/issues/7668)
• Fix for argument list too long errors from resource rollout job. The Gateway custom resource yaml is now stored in a ConfigMap. The resource rollout job mounts the ConfigMap as a file and applies the file, instead of applying the entire yaml inline. (https://github.com/solo-io/gloo/issues/7060)
• Upgrade to solo-kit version which fixes status reporting for multiple namespaces. (https://github.com/solo-io/solo-kit/issues/529)

Dependency Bumps

• solo-io/solo-kit has been upgraded to v0.30.9.

Fixes

• Fix for argument list too long errors from resource rollout job. The Gateway custom resource yaml is now stored in a ConfigMap. The resource rollout job mounts the ConfigMap as a file and applies the file, instead of applying the entire yaml inline. (https://github.com/solo-io/gloo/issues/7060)
• Upgrade to solo-kit version which fixes status reporting for multiple namespaces. (https://github.com/solo-io/solo-kit/issues/529)

Dependency Bumps

• solo-io/solo-kit has been upgraded to v0.30.9.

Helm Changes

• Add backoffLimit, completions, manualSelector, and parallelism fields to k8s jobs. https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#job-v1-batch (https://github.com/solo-io/gloo/issues/7112)

Fixes

• Fix for argument list too long errors from resource rollout job. The Gateway custom resource yaml is now stored in a ConfigMap. The resource rollout job mounts the ConfigMap as a file and applies the file, instead of applying the entire yaml inline. (https://github.com/solo-io/gloo/issues/7060)
• Upgrade to solo-kit version which fixes status reporting for multiple namespaces. (https://github.com/solo-io/solo-kit/issues/529)