gloo

Dependency Bumps

• linux/alpine has been upgraded to 3.15.6.

Fixes

• Use the correct namespace to check for gloo installation when registering clusters for Gloo Fed. (https://github.com/solo-io/gloo/issues/5832)

Dependency Bumps

• linux/alpine has been upgraded to 3.15.6.

New Features

• Allow the Gloo component of the ControlPlane to be scaled when running in Kubernetes.
  Using https://github.com/kubernetes/client-go/tree/master/tools/leaderelection,
  leader election will take place automatically. (https://github.com/solo-io/gloo/issues/5795)
• Added priorityClassName to all workloads in helm. (https://github.com/solo-io/gloo/issues/6560)

Fixes

• Use the correct namespace to check for gloo installation when registering clusters for Gloo Fed. (https://github.com/solo-io/gloo/issues/5832)
• Added support fo the envoy.filters.listener.tls_inspector listener_filter when using the gateway.isolateVirtualHostsBySslConfig=true global setting. is provided (https://github.com/solo-io/gloo/issues/6677)
• Remove default activeDeadlineSeconds from jobs. (https://github.com/solo-io/gloo/issues/6821)

Fixes

• Allow the Gloo component of the ControlPlane to be scaled when running in Kubernetes.
  Using https://github.com/kubernetes/client-go/tree/master/tools/leaderelection,
  leader election will take place automatically. (https://github.com/solo-io/gloo/issues/5795)
• Added support fo the envoy.filters.listener.tls_inspector listener_filter when using the gateway.isolateVirtualHostsBySslConfig=true global setting. is provided (https://github.com/solo-io/gloo/issues/6677)
• Remove default activeDeadlineSeconds from jobs. (https://github.com/solo-io/gloo/issues/6821)

Fixes

• Backport of fix - Adds AutoMapFromMetadata to the OIDC IssuerConfig struct. When configured, dynamic metadata values in the specified namespace will be mapped to query params on requests made to the OIDC auth endpoint and the OIDC token endpoint. (https://github.com/solo-io/gloo/issues/6782)

This release contained no user-facing changes.

New Features

• Adds the new field TargetDomain to our RedisSession and InternalSession on our extauth api to be used to validate against the request hostname. (https://github.com/solo-io/ext-auth-service/issues/314)

Fixes

• Fix bug causing SDS config to be generated with an EnvoyGrpc TargetSpecifier instead of GoogleGrpc when TargetUri
  is provided (https://github.com/solo-io/gloo/issues/6799)

Fixes

• Add a flag to LDAP config to allow auth without group checking (https://github.com/solo-io/gloo/issues/6369)
• Hosts now respect top-level healthChecks when provided (https://github.com/solo-io/gloo/issues/6770)
• Fix bug causing SDS config to be generated with an EnvoyGrpc TargetSpecifier instead of GoogleGrpc when TargetUri
  is provided (https://github.com/solo-io/gloo/issues/6799)

Fixes

• Add a flag to LDAP config to allow auth without group checking (https://github.com/solo-io/gloo/issues/6369)
• Hosts now respect top-level healthChecks when provided (https://github.com/solo-io/gloo/issues/6770)
• Fix bug causing SDS config to be generated with an EnvoyGrpc TargetSpecifier instead of GoogleGrpc when TargetUri
  is provided (https://github.com/solo-io/gloo/issues/6799)

Fixes

• Ensure that each run of the translation loop has a separate instance of the plugins by creating them with a PluginRegistryFactory at the start of translation. This solves the issue where Gloo crashes due to concurrent writes to maps. (https://github.com/solo-io/gloo/issues/6914)
• now returns proxies upto MaxInt32 bytes (100Mb prior) (https://github.com/solo-io/gloo/pull/6630)
• Fix bug causing SDS config to be generated with an EnvoyGrpc TargetSpecifier instead of GoogleGrpc when TargetUri
  is provided (https://github.com/solo-io/gloo/issues/6799)

Fixes

• Fix bug causing SDS config to be generated with an EnvoyGrpc TargetSpecifier instead of GoogleGrpc when TargetUri
  is provided (https://github.com/solo-io/gloo/issues/6799)

Fixes

• Ensure that each run of the translation loop has a separate instance of the plugins by creating them with a PluginRegistryFactory at the start of translation. This solves the issue where Gloo crashes due to concurrent writes to maps. (https://github.com/solo-io/gloo/issues/6914)
• now returns proxies upto MaxInt32 bytes (100Mb prior) (https://github.com/solo-io/gloo/pull/6627)

Fixes

• Add helm customization (pod spec fields, resource requirements, disabling istio injection) that was missing from the gloo-resource-rollout, gloo-resource-migration, and gloo-resource-cleanup jobs. Allow disabling the jobs (not recommended unless default Gateways/Upstreams are not needed). (https://github.com/solo-io/gloo/issues/6847)
• Added activeDeadlineSeconds to all k8s jobs (https://github.com/solo-io/gloo/issues/6821)
• Build a kubectl image for use during install/upgrade/cleanup jobs. (https://github.com/solo-io/gloo/issues/6858)
• Hosts now respect top-level healthChecks when provided (https://github.com/solo-io/gloo/issues/6770)

Fixes

• Add config to enable users to opt-in to configuring an AuthConfig to fail when
  an OIDC provider returns a redirect instead of returning that redirect to the
  client. When set to true, a 401 unauthorized will be returned instead of 302. (https://github.com/solo-io/gloo/issues/6811)
• Add helm customization (pod spec fields, resource requirements, disabling istio injection) that was missing from the gloo-resource-rollout, gloo-resource-migration, and gloo-resource-cleanup jobs. Allow disabling the jobs (not recommended unless default Gateways/Upstreams are not needed). (https://github.com/solo-io/gloo/issues/6847)
• Added activeDeadlineSeconds to all k8s jobs (https://github.com/solo-io/gloo/issues/6821)
• Build a kubectl image for use during install/upgrade/cleanup jobs. (https://github.com/solo-io/gloo/issues/6858)
• Hosts now respect top-level healthChecks when provided (https://github.com/solo-io/gloo/issues/6770)

Dependency Bumps

• solo-io/go-utils has been upgraded to 0.22.1.

Fixes

• Add helm customization (pod spec fields, resource requirements, disabling istio injection) that was missing from the gloo-resource-rollout, gloo-resource-migration, and gloo-resource-cleanup jobs. Allow disabling the jobs (not recommended unless default Gateways/Upstreams are not needed). (https://github.com/solo-io/gloo/issues/6847)
• Hosts now respect top-level healthChecks when provided (https://github.com/solo-io/gloo/issues/6770)

Fixes

• Add a flag to LDAP config to allow auth without group checking (https://github.com/solo-io/gloo/issues/6369)
• Restore the ability for ipv4 only clusters to work with our new 1.22 envoy build (https://github.com/solo-io/gloo/issues/6860)

Dependency Bumps

• bitnami/kubectl has been upgraded to 1.22.12.

Fixes

• Add config to enable users to opt-in to configuring an AuthConfig to fail when
  an OIDC provider returns a redirect instead of returning that redirect to the
  client. When set to true, a 401 unauthorized will be returned instead of 302. (https://github.com/solo-io/gloo/issues/6811)
• Add a flag to LDAP config to allow auth without group checking (https://github.com/solo-io/gloo/issues/6369)

New Features

• Added activeDeadlineSeconds to all k8s jobs (https://github.com/solo-io/gloo/issues/6821)
• Build a kubectl image for use during install/upgrade/cleanup jobs. (https://github.com/solo-io/gloo/issues/6858)

Fixes

• Restore the ability for ipv4 only clusters to work with our new 1.22 envoy build (https://github.com/solo-io/gloo/issues/6860)

Dependency Bumps

• bitnami/kubectl has been upgraded to 1.22.12.

Dependency Bumps

• bitnami/kubectl has been upgraded to 1.22.12.

This release contained no user-facing changes.