gloo

New Features

• Update the Tracer plugin to support Envoy's OpenTelemetry filter: https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/trace/v3/opentelemetry.proto (https://github.com/solo-io/gloo/issues/7406)

Dependency Bumps

• golang/x/mod has been upgraded to v0.7.0.
• golang/x/sync has been upgraded to v0.1.0.
• golang/x/tools has been upgraded to v0.3.0.

New Features

• Add option that allows usage of lambda upstreams without specifying a function. Affects custom extensions of the lambda extension built in go that use gloo as a library. This is purely a work around for current Gloo Portal behavior and likely should not be opted into otherwise. (https://github.com/solo-io/solo-projects/issues/4274)
• Aws lambda set upstream level defaults to override route destinations. (https://github.com/solo-io/solo-projects/issues/4274)
• Added a flag to glooctl check (--read-only) that prevents it from doing any port forwarding and checking of resulting resources. (https://github.com/solo-io/gloo/issues/5462)

Fixes

• Added two checks, one to ensure that we have at least one gateway-proxy deployment in the cluster, another to ensure each gateway-proxy deployment has at least one replica (https://github.com/solo-io/gloo/issues/5768)
• --vault-token flag incorrectly had the description associated with --vault-address (https://github.com/solo-io/gloo/issues/7469)

New Features

• Allow regression tests to be run against released versions of gloo in addition to local builds. (https://github.com/solo-io/solo-projects/issues/4191)

New Features

• Expose the ability to set retry backoff policy's intervals. This can be set at the gateway, vs, or even the route level. (https://github.com/solo-io/gloo/issues/6933)
• Validation webhook will now validate Rate Limit Configs. The IgnoreProxyValidationFailure flag is now deprecated. (https://github.com/solo-io/gloo/issues/6777)
• Added a --resource-namespaces flag to glooctl check to only scan custom resources in the specified watched namespaces. Added a --pod-selector flag to specify a label selector for pod checking in the install namespace. (https://github.com/solo-io/gloo/issues/1299)

Fixes

• Fix for issue where multiple routes defined for the same upstream would remove the UpstreamTlsContext associated with the tunneling cluster and all requests would be sent through the tunnel as http. (https://github.com/solo-io/gloo/issues/7313)

Fixes

• Fix for issue where multiple routes defined for the same upstream would remove the UpstreamTlsContext associated with the tunneling cluster and all requests would be sent through the tunnel as http. (https://github.com/solo-io/gloo/issues/7313)

Fixes

• Fix for issue where multiple routes defined for the same upstream would remove the UpstreamTlsContext associated with the tunneling cluster and all requests would be sent through the tunnel as http. (https://github.com/solo-io/gloo/issues/7313)

Fixes

• Fix a bug in configuring Envoy upstreams where some http protocol options could not be specified when useHttp2 was enabled (https://github.com/solo-io/gloo/issues/6983)
• Fix for issue where multiple routes defined for the same upstream would remove the UpstreamTlsContext associated with the tunneling cluster and all requests would be sent through the tunnel as http. (https://github.com/solo-io/gloo/issues/7313)

Fixes

• Fix a bug in configuring Envoy upstreams where some http protocol options could not be specified when useHttp2 was enabled (https://github.com/solo-io/gloo/issues/6983)

Dependency Bumps

• solo-io/solo-kit has been upgraded to v0.30.8.

Helm Changes

• Add support for adding extra labels and annotations to Helm Hook Jobs. (https://github.com/solo-io/gloo/issues/2665)

New Features

• Allow configuration of TCP keepalive time via helm at time of installation. Additionally, reduces the default TCP keepalive time from 2 hours to 1 minute. (https://github.com/solo-io/gloo/issues/7349)

Fixes

• Fix a bug in configuring Envoy upstreams where some http protocol options could not be specified when useHttp2 was enabled (https://github.com/solo-io/gloo/issues/6983)
• Fix for issue where multiple routes defined for the same upstream would remove the UpstreamTlsContext associated with the tunneling cluster and all requests would be sent through the tunnel as http. (https://github.com/solo-io/gloo/issues/7313)

Dependency Bumps

• golang.org/x/text has been upgraded to v0.4.0.

Dependency Bumps

• golang.org/x/text has been upgraded to v0.4.0.

This release contained no user-facing changes.

This release contained no user-facing changes.

Dependency Bumps

• golang.org/x/text has been upgraded to v0.4.0.

Fixes

• Differentiate between use_downstream_protocol_config and explicit_http_config when useHttp2 is set on an Upstream. (https://github.com/solo-io/gloo/issues/7096)

Dependency Bumps

• golang.org/x/text has been upgraded to v0.4.0.

Helm Changes

• Expose a new Helm value gloo.disableLeaderElection which is false by default. Gloo will run leader election to support high availability, even if there is only 1 replica. This configuration, when set to true, will explicitly disable leader election, regardless of the number of replicas. (https://github.com/solo-io/gloo/issues/7346)

Fixes

• Differentiate between use_downstream_protocol_config and explicit_http_config when useHttp2 is set on an Upstream. (https://github.com/solo-io/gloo/issues/7096)
• Differentiate between use_downstream_protocol_config and explicit_http_config when useHttp2 is set on an Upstream. (https://github.com/solo-io/gloo/issues/7096)

Helm Changes

• Expose a new Helm value gloo.disableLeaderElection which is false by default. Gloo will run leader election to support high availability, even if there is only 1 replica. This configuration, when set to true, will explicitly disable leader election, regardless of the number of replicas. (https://github.com/solo-io/gloo/issues/7346)

New Features

• Add the API required to configure extauth to look up group membership using a service account. Also add a glooctl command to create secrets to store credentials for the service account. (https://github.com/solo-io/ext-auth-service/issues/404)

Fixes

• Differentiate between use_downstream_protocol_config and explicit_http_config when useHttp2 is set on an Upstream. (https://github.com/solo-io/gloo/issues/7096)

Fixes

• Use kubectl patch rather than read then write pattern to update status on custom resources, which makes gloo a less noisy client to the k8s apiserver. NOTE: Users will need to apply new CRDs with this release to get CRD field defaulting behavior that this fix depends on, or else status updates to brand new resources (i.e. status or status.statuses does not exist) will fail. Even if these status updates fail, data-plane traffic and control-plane updates will be unaffected and work as usual. (https://github.com/solo-io/gloo/issues/7076)

New Features

• Glooctl install gateway enterprise now requires a license key or it will fail (https://github.com/solo-io/solo-projects/issues/4124)