gloo

Fixes

• When a reference to a VirtualHostOption or RouteOption CR is not found, apply a warning on the parent resource, where we previously applied an error. This follows the delegation pattern established by RouteTables, and ensures that resources can be applied asynchronously. (https://github.com/solo-io/gloo/issues/2484)
• Disable istio sidecar injection for Jobs and CronJobs (regardless of global.istioIntegration.disableAutoinjection value) as it causes jobs to hang. (https://github.com/solo-io/gloo/issues/7081)
• Enable to set isolateVirtualHostsBySslConfig parameter in the setting.yaml template by exposing it in the chart.yaml file (https://github.com/solo-io/gloo/issues/6677)
• Fix for inferring the OSS version from an enterprise install when injecting an SDS sidecar. (https://github.com/solo-io/gloo/issues/6623)
• Enable HCM options to support 0-value overrides for Duration and ResourceRef object types (https://github.com/solo-io/gloo/issues/6476)

Fixes

• Disable istio sidecar injection for Jobs and CronJobs (regardless of global.istioIntegration.disableAutoinjection value) as it causes jobs to hang. (https://github.com/solo-io/gloo/issues/7081)
• Enable to set isolateVirtualHostsBySslConfig parameter in the setting.yaml template by exposing it in the chart.yaml file (https://github.com/solo-io/gloo/issues/6677)

Fixes

• Enable to set isolateVirtualHostsBySslConfig parameter in the setting.yaml template by exposing it in the chart.yaml file (https://github.com/solo-io/gloo/issues/6677)

Fixes

• Disable istio sidecar injection for Jobs and CronJobs (regardless of global.istioIntegration.disableAutoinjection value) as it causes jobs to hang. (https://github.com/solo-io/gloo/issues/7081)

Fixes

• Enable HCM options to support 0-value overrides. (https://github.com/solo-io/gloo/issues/6476)

Fixes

• Change debug logs in validating webhook to not reference the Proxy
  It might be slightly less readable but will cause less memory overhead (https://github.com/solo-io/gloo/issues/7031)

Dependency Bumps

• envoyproxy/go-control-plane has been upgraded to v0.10.3.

Fixes

• Backport fix for when we are running in Istio compatibility mode, add a host rewrite for destinations in the mesh so that Istio recognizes them. (https://github.com/solo-io/gloo/issues/6538)
• Enable installing revisioned istio by introducing the install override value global.istioIntegration.istioSidecarRevTag and using that to set istio.io/rev in gateway proxy and discovery pods. (https://github.com/solo-io/gloo/issues/6594)
• Ensure that gateway proxies with custom names get correct annotations for excludeInboundPorts. (https://github.com/solo-io/gloo/issues/6618)
• Change debug logs in validating webhook to not reference the Proxy
  It might be slightly less readable but will cause less memory overhead (https://github.com/solo-io/gloo/issues/7031)

Fixes

• Enable installing revisioned istio by introducing the install override value global.istioIntegration.istioSidecarRevTag and using that to set istio.io/rev in gateway proxy and discovery pods. (https://github.com/solo-io/gloo/issues/6594)
• Ensure that gateway proxies with custom names get correct annotations for excludeInboundPorts. (https://github.com/solo-io/gloo/issues/6618)

This release contained no user-facing changes.

New Features

• Consul EDS discovery query mode is now configurable (blocking vs non-blocking consul queries) via eds_blocking_queries on the Gloo Settings. The default remains the same (non-blocking queries) becuase this is more performant with cache hits on the consul agent (caching also enabled by default) but can be more performant when caching is disabled since blocking queries should result in fewer network calls. (https://github.com/solo-io/gloo/issues/6599)
• Expose extensions.filters.network.http_connection_manager.v3.HttpConnectionManager.InternalAddressConfig This change was previously reverted due to issues bumping the go-control-plane dependency which have since been fixed. (https://github.com/solo-io/gloo/issues/6470)

Fixes

• Fix consul DNS polling interval to honor configuration on the Gloo Settings (default 5s). (https://github.com/solo-io/gloo/issues/7037)
• Trivy no longer scans nonexistant gateway image for Gloo >=1.12 (https://github.com/solo-io/gloo/issues/7040)
• Enable HCM options to support 0-value overrides. (https://github.com/solo-io/gloo/issues/6476)
• Change debug logs in validating webhook to not reference the Proxy
  It might be slightly less readable but will cause less memory overhead (https://github.com/solo-io/gloo/issues/7031)

Dependency Bumps

• envoyproxy/go-control-plane has been upgraded to v0.10.3.

New Features

• When we are running in Istio compatibility mode, add a host rewrite for destinations in the mesh so that Istio recognizes them. (https://github.com/solo-io/gloo/issues/6538)

New Features

• Allowlist added to filter in consul services with specified tags (https://github.com/solo-io/gloo/issues/6815)

This release contained no user-facing changes.

Dependency Bumps

• envoy-gloo/solo-io has been upgraded to v1.23.0-patch3.

New Features

• Expose option to remove headers in the transformation filter (https://github.com/solo-io/gloo/issues/6539)
• Allow for more easily denoting a seperate account's lambda that is
  allowed to be used via a resource policy basis. (https://github.com/solo-io/gloo/issues/6941)
• Add HTTPConnect headers to Upstream to support Proxy-Authorization header. (https://github.com/solo-io/gloo/issues/5859)

Fixes

• Remove the duplicate VolumeMount definition on the Gloo Deployment.
  If upgrading Gloo using the Fluxv2 stack, the Helm-Controller would emit an error about duplicate keys,
  and fail the upgrade. Anyone using the Helm CLI would not encounter an error, but would have one of the
  VolumeMount defintions applied, which could lead to errors. (https://github.com/solo-io/gloo/issues/6977)
• Redact Artifact contents when stringifying the Gloo API Snapshot. Previously Secrets were redacted,
  as they contain sensitive information. It's possible that ConfigMaps could as well, so we redact
  Artifacts as well. (https://github.com/solo-io/solo-projects/issues/3975)
• Use consul agent cache by default when fetching CatalogServices to build endpoints for EDS, which should help improve performance. Caching is configurable. (https://github.com/solo-io/gloo/issues/6599)
• Modify the Validation Webhook to auto-accept status updates to resources.
  Previously, a full translation run would kick off to validate status updates. (https://github.com/solo-io/gloo/issues/6990)

New Features

• Add HTTPConnect headers to Upstream to support Proxy-Authorization header. (https://github.com/solo-io/gloo/issues/5859)

Fixes

• Modify the Validation Webhook to auto-accept status updates to resources.
  Previously, a full translation run would kick off to validate status updates. (https://github.com/solo-io/gloo/issues/6990)

Fixes

• Redact Artifact contents when stringifying the Gloo API Snapshot. Previously Secrets were redacted,
  as they contain sensitive information. It's possible that ConfigMaps could as well, so we redact
  Artifacts as well. (https://github.com/solo-io/solo-projects/issues/3975)
• Added support fo the envoy.filters.listener.tls_inspector listener_filter when using the gateway.isolateVirtualHostsBySslConfig=true global setting. is provided (https://github.com/solo-io/gloo/issues/6677)

Dependency Bumps

• envoy-gloo/solo-io has been upgraded to v1.23.0-patch3.

Fixes

• Remove the duplicate VolumeMount definition on the Gloo Deployment.
  If upgrading Gloo using the Fluxv2 stack, the Helm-Controller would emit an error about duplicate keys,
  and fail the upgrade. Anyone using the Helm CLI would not encounter an error, but would have one of the
  VolumeMount defintions applied, which could lead to errors. (https://github.com/solo-io/gloo/issues/6977)
• Redact Artifact contents when stringifying the Gloo API Snapshot. Previously Secrets were redacted,
  as they contain sensitive information. It's possible that ConfigMaps could as well, so we redact
  Artifacts as well. (https://github.com/solo-io/solo-projects/issues/3975)
• Allow for more easily denoting a seperate account's lambda that is
  allowed to be used from a resource policy basis. (https://github.com/solo-io/gloo/issues/6941)

Dependency Bumps

• linux/alpine has been upgraded to 3.15.6.

Fixes

• Use the correct namespace to check for gloo installation when registering clusters for Gloo Fed. (https://github.com/solo-io/gloo/issues/5832)

Dependency Bumps

• linux/alpine has been upgraded to 3.15.6.

Fixes

• Use the correct namespace to check for gloo installation when registering clusters for Gloo Fed. (https://github.com/solo-io/gloo/issues/5832)

Dependency Bumps

• linux/alpine has been upgraded to 3.15.6.

Fixes

• Use the correct namespace to check for gloo installation when registering clusters for Gloo Fed. (https://github.com/solo-io/gloo/issues/5832)
• Remove default activeDeadlineSeconds from jobs. (https://github.com/solo-io/gloo/issues/6821)