gloo

Dependency Bumps

• solo-io/solo-kit has been upgraded to v0.30.9.
• solo-io/k8s-utils has been upgraded to v0.1.9.

Helm Changes

• Added gatewayProxies.gatewayProxy.envoyLogLevel to the helm values and removed gloo.gatewayProxies.gatewayProxy.logLevel as the latter has no use in setting the gateway-proxy log level. (https://github.com/solo-io/gloo/issues/5477)

New Features

• Provide a helm template value gatewayProxies.gatewayProxy.disableCoreDumps which disables core dumps from being written in the event of an Envoy crash (https://github.com/solo-io/gloo/issues/7659)
• Add backoffLimit, completions, manualSelector, and parallelism fields to k8s jobs. https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#job-v1-batch (https://github.com/solo-io/gloo/issues/7112)
• Allow storing proto descriptors used for gRPC to JSON transcoding in a ConfigMap and referencing the ConfigMap from the Gateway options. (https://github.com/solo-io/gloo/issues/7495)
• Implement authentication to Vault as a secrets backend via AWS IAM (https://developer.hashicorp.com/vault/docs/auth/aws) (https://github.com/solo-io/gloo/issues/7640)

Fixes

• Exempt dynamic forward proxies from being auto-censure by enabling the replaceInvalidRoutes feature (https://github.com/solo-io/gloo/issues/7668)
• Exempt http tunnels from being auto-censured by enabling the replaceInvalidRoutes feature (https://github.com/solo-io/gloo/issues/7668)
• Avoid argument list too long errors from resource rollout job by enabling getting proto descriptors from a ConfigMap instead of including the proto descriptor inline. (https://github.com/solo-io/gloo/issues/7060)
• Fix for argument list too long errors from resource rollout job. The Gateway custom resource yaml is now stored in a ConfigMap. The resource rollout job mounts the ConfigMap as a file and applies the file, instead of applying the entire yaml inline. (https://github.com/solo-io/gloo/issues/7060)
• Upgrade to solo-kit version which fixes status reporting for multiple namespaces. (https://github.com/solo-io/solo-kit/issues/529)

This release contained no user-facing changes.

Helm Changes

• Adding topologySpreadConstraints to gateway-proxy. (https://github.com/solo-io/gloo/issues/7582)

Fixes

• Allow storing proto descriptors used for gRPC to JSON transcoding in a ConfigMap and referencing the ConfigMap from the Gateway options. (https://github.com/solo-io/gloo/issues/7495)
• Avoid argument list too long errors from resource rollout job by enabling getting proto descriptors from a ConfigMap instead of including the proto descriptor inline. (https://github.com/solo-io/gloo/issues/7060)

Helm Changes

• Adding topologySpreadConstraints to gateway-proxy. (https://github.com/solo-io/gloo/issues/7582)

Fixes

• Allow storing proto descriptors used for gRPC to JSON transcoding in a ConfigMap and referencing the ConfigMap from the Gateway options. (https://github.com/solo-io/gloo/issues/7495)
• Avoid argument list too long errors from resource rollout job by enabling getting proto descriptors from a ConfigMap instead of including the proto descriptor inline. (https://github.com/solo-io/gloo/issues/7060)

New Features

• Adding TLS support for extauth Grpc passthrough. (https://github.com/solo-io/gloo/issues/7663)
• Opens the option for the router config on hcm to enable the passing of a bool to suppress the envoy headers. (https://github.com/solo-io/gloo/issues/6713)

Helm Changes

• Move pod-level options outside of istio/sds container configuration. (https://github.com/solo-io/gloo/issues/5665)

Fixes

• Fix issue with istio-proxy being set in tolerations by moving pod-level options (including tolerations) out of container configuration. (https://github.com/solo-io/gloo/issues/5665)

Dependency Bumps

• onsi/gomega has been upgraded to v1.20.0.

New Features

• This features exposes envoy's access log filters in gloo. The Envoy definitions are documented here: https://www.envoyproxy.io/docs/envoy/v1.24.1/api-v3/config/accesslog/v3/accesslog.proto#config-accesslog-v3-accesslogfilter and the Gloo interface uses the same definitions. These filters are used to only send certain entries to the access logs, for example based on status codes or a random sampling. (https://github.com/solo-io/gloo/issues/2340)
• Add support for gateway proxy horizontal pod autoscaling autoscaling/v2 (https://github.com/solo-io/gloo/issues/7634)
• Added glooctl --kube-context <string> to allow selection of the kubecontext an operation is performed with. (https://github.com/solo-io/gloo/issues/7565)

Fixes

• Expose the circuitBreakers settings field as a Helm chart value. (https://github.com/solo-io/gloo/issues/7316)
• Add route validation to reject and sanitize invalid paths.
  Set the normalized_path attribute for the Envoy HTTP Connection Manager to true as the default value. (https://github.com/solo-io/solo-projects/issues/4336)

Fixes

• Add route validation to reject and sanitize invalid paths.
  Set the normalized_path attribute for the Envoy HTTP Connection Manager to true as the default value. (https://github.com/solo-io/solo-projects/issues/4336)

Fixes

• Add route validation to reject and sanitize invalid paths.
  Set the normalized_path attribute for the Envoy HTTP Connection Manager to true as the default value. (https://github.com/solo-io/solo-projects/issues/4336)

Fixes

• Expose the circuitBreakers settings field as a Helm chart value. (https://github.com/solo-io/gloo/issues/7316)
• Add route validation to reject and sanitize invalid paths.
  Set the normalized_path attribute for the Envoy HTTP Connection Manager to true as the default value. (https://github.com/solo-io/solo-projects/issues/4336)

Breaking Changes

• Set the normalized_path attribute for the Envoy HTTP Connection Manager to true as the default value. (https://github.com/solo-io/solo-projects/issues/4336)

Helm Changes

• Adding topologySpreadConstraints to gateway-proxy. (https://github.com/solo-io/gloo/issues/7582)

New Features

• Added glooctl check-crds --version <string> --local-chart <string> --show-yaml <bool> to check if diffs exist between deployed CRDs and a given helm charts CRDs exist. (https://github.com/solo-io/solo-projects/issues/4193)

Fixes

• Glooctl check functions now report all resources regardless if they have statuses reported yet or not. Added error messages for resources with no statuses. (https://github.com/solo-io/gloo/issues/7153)
• Add route validation to reject and sanitize invalid paths. (https://github.com/solo-io/solo-projects/issues/4336)

Helm Changes

• Adding gatewayProxies.gatewayProxy.podTemplate.extraInitContainers and
  gatewayProxies.gatewayProxy.podTemplate.extraContainers to the helm chart. These will
  add initContainers and containers to the gateway proxy deployment respectfully.
  Adding in initContainers as well to the podSpecs of deployments. (https://github.com/solo-io/gloo/issues/7247)

New Features

• Expose Envoy route option host_rewrite_path_regex, which indicates that during forwarding, the host header will be swapped with the result of the regex substitution executed on path value with query and fragment removed. This is useful for transitioning variable content between path segment and subdomain. Using this option will append the x-forwarded-host header if append_x_forwarded_host is set. See https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/route/v3/route_components.proto (https://github.com/solo-io/gloo/issues/6771)

Fixes

• • Expose the fallbackToFirstFunction field through helm, allowing it to be configured at installation.
• When fallbackToFirstFunction is enabled, if destinationSpec is not set on a VirtualService, it will get processed as an AWS route if the upstream reference is an AWS upstream. (https://github.com/solo-io/solo-projects/issues/4274)
• Fixes an issue where when a destinationSpec was not set for an aws route, the upstream's destinationOverrides were not configured. (https://github.com/solo-io/solo-projects/issues/4274)

Helm Changes

• Adding gatewayProxies.gatewayProxy.podTemplate.extraInitContainers and
  gatewayProxies.gatewayProxy.podTemplate.extraContainers to the helm chart. These will
  add initContainers and containers to the gateway proxy deployment respectfully.
  Adding in initContainers as well to the podSpecs of deployments. (https://github.com/solo-io/gloo/issues/7247)

Helm Changes

• Adding gatewayProxies.gatewayProxy.podTemplate.extraInitContainers and
  gatewayProxies.gatewayProxy.podTemplate.extraContainers to the helm chart. These will
  add initContainers and containers to the gateway proxy deployment respectfully.
  Adding in initContainers as well to the podSpecs of deployments. (https://github.com/solo-io/gloo/issues/7247)

Helm Changes

• Adding gatewayProxies.gatewayProxy.podTemplate.extraInitContainers and
  gatewayProxies.gatewayProxy.podTemplate.extraContainers to the helm chart. These will
  add initContainers and containers to the gateway proxy deployment respectfully.
  Adding in initContainers as well to the podSpecs of deployments. (https://github.com/solo-io/gloo/issues/7247)

Dependency Bumps

• solo-io/skv2 has been upgraded to v0.26.0.
• solo-io/k8s-utils has been upgraded to v0.1.7.
• solo-io/go-utils has been upgraded to v0.22.4.

Dependency Bumps

• solo-io/skv2 has been upgraded to v0.26.0.
• solo-io/k8s-utils has been upgraded to v0.1.7.

Fixes

• Expose Envoy's opencensus plugin via Gloo. This extension is provided to enable W3C-compliant tracing metadata to be sent to a collector. Note that the Envoy extension has severe limitations which are documented in this feature, so users should take great care before enabling it. (https://github.com/solo-io/gloo/issues/7406)

Dependency Bumps

• solo-io/go-utils has been upgraded to v0.23.0.
• golang/x/sync has been upgraded to v0.1.0.
• golang/x/tools has been upgraded to v0.3.0.
• solo-io/k8s-utils has been upgraded to v0.1.4.
• solo-io/skv2 has been upgraded to v0.26.0.
• solo-io/k8s-utils has been upgraded to v0.1.7.

Breaking Changes

• Removed disableUsageReporting from glooctl-gonfig.yaml, functionality removed in https://github.com/solo-io/gloo/commit/973d12b03b661a781d31fe9130403725ccc0f339#diff-fb80295aabf60cfc9f228596c24465c7c0e065906264f26f6320d6fb3b33a605 (https://github.com/solo-io/gloo/issues/4204)

Helm Changes

• when settings.linkerd=true on Helm releases, linkerd injection will been disabled on all jobs to ensure the resulting pods are executed and terminated correctly (https://github.com/solo-io/gloo/issues/7488)

New Features

• glooctl-config.yaml now has a checkTimeoutSettings setting for setting a timeout for glooctl check (https://github.com/solo-io/gloo/issues/4204)
• Publish more glooctl images such as darwin-arm64 on github release assets (seperate from brew) (https://github.com/solo-io/gloo/issues/5471)
• Expose Envoy's opencensus plugin via Gloo. This extension is provided to enable W3C-compliant tracing metadata to be sent to a collector. Note that the Envoy extension has severe limitations which are documented in this feature, so users should take great care before enabling it. (https://github.com/solo-io/gloo/issues/7406)
• Update the Tracer plugin to support Envoy's OpenTelemetry filter: https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/trace/v3/opentelemetry.proto (https://github.com/solo-io/gloo/issues/7406)
• Adds the new IdleTimeout field to RouteOptions to correspond to envoys config.route.v3.RouteAction.IdleTimeout (https://github.com/solo-io/gloo/issues/7545)