gloo

Fixes

• Update proxy API metadata fields to have a non opaque option. The previous option, now deprecated,
  was very inefficient due to many json marshal/unmarshals. (https://github.com/solo-io/gloo/issues/5976)
• Fix indentation with selector in discovery service (https://github.com/solo-io/gloo/issues/6041)

New Features

• Adds the ability to deep merge discovered annotation config specified via the gloo.solo.io/upstream_config annotation with default upstream config. A user can enable this feature by setting the gloo.solo.io/upstream_config/deep_merge annotation to true on the service for which an upstream is discovered. (https://github.com/solo-io/gloo/issues/6005)

Fixes

• Update proxy API metadata fields to have a non opaque option. The previous option, now deprecated,
  was very inefficient due to many json marshal/unmarshals. (https://github.com/solo-io/gloo/issues/5976)
• Disabling discovery prevents creation of Service Account and assignment to Role Binding resources (https://github.com/solo-io/gloo/issues/5866)
• Fix indentation with selector in discovery service (https://github.com/solo-io/gloo/issues/6041)
• Cache transformation validation results in transformation plugin. (https://github.com/solo-io/gloo/issues/5720)

New Features

• Adds the ability to deep merge discovered annotation config specified via the gloo.solo.io/upstream_config annotation with default upstream config. A user can enable this feature by setting the gloo.solo.io/upstream_config/deep_merge annotation to true on the service for which an upstream is discovered. (https://github.com/solo-io/gloo/issues/6005)

Fixes

• Disabling discovery prevents creation of Service Account and assignment to Role Binding resources (https://github.com/solo-io/gloo/issues/5866)

Helm Changes

• Allow users to disable the default gateways, which can be helpful for users who configure the validation webhook to strict failures (i.e. gloo.gateway.validation.failurePolicy: Fail) so validation works on installation and upgrades. Once the gateway pod is running and healthy, the user can then apply the default gateways. (https://github.com/solo-io/gloo/issues/4468)

Fixes

• Fix invalid route replacement when upstream points to missing service. (https://github.com/solo-io/gloo/issues/6008)

Fixes

• Fix invalid route replacement when upstream points to missing service. (https://github.com/solo-io/gloo/issues/6008)

This release build failed.

New Features

• Adds support for the Envoy HTTP Connection Manager setting enable_trailers. (https://github.com/solo-io/gloo/issues/5633)
• Adds support for Preserving Case and Proper Case to https REQUEST headers. Previous releases added the ability to do the same for RESPONSE headers--this closes the gap. (https://github.com/solo-io/gloo/issues/5522)

Fixes

• Ensure that ratelimit settings are configured through helm correctly. (https://github.com/solo-io/gloo/issues/5377)
• Ensure that gateway-proxy ServiceMonitor does not expose metrics externally (https://github.com/solo-io/gloo/issues/5992)
• Introduce Discovery Service to support ServiceMonitor (https://github.com/solo-io/gloo/issues/5990)

This release build failed.

New Features

• Adds support for Preserving Case and Proper Case to https REQUEST headers. Previous releases added the ability to do the same for RESPONSE headers--this closes the gap. (https://github.com/solo-io/gloo/issues/5522)

Fixes

• Ensure that gateway-proxy ServiceMonitor does not expose metrics externally (https://github.com/solo-io/gloo/issues/5992)
• Introduce Discovery Service to support ServiceMonitor (https://github.com/solo-io/gloo/issues/5990)

New Features

• Adds support for the Envoy HTTP Connection Manager setting enable_trailers. (https://github.com/solo-io/gloo/issues/5633)

Fixes

• Fix gloo-fed demo (glooctl demo federation). (https://github.com/solo-io/gloo/issues/4917)
• Extend the timeout for listing secrets during glooctl check to prevent
  noisy messages when there is latency in the request. This value,
  secretClientTimeoutSeconds, defaults to 30, and can be configured in
  ~/.gloo/glooctl-config.yaml. (https://github.com/solo-io/gloo/issues/4750)
• Ensure that ratelimit settings are configured through helm correctly. (https://github.com/solo-io/gloo/issues/5377)

This release contained no user-facing changes.

New Features

• Add support for exlcuding all types with glooctl check -x (https://github.com/solo-io/gloo/issues/5881)
• Add configuration status metric support for UpstreamGroup CRs (https://github.com/solo-io/gloo/issues/5935)

Fixes

• Make sure that aws lambda refresh and propagation of origin are always respected (https://github.com/solo-io/gloo/issues/5253)
• glooctl get us will no longer panic on upstreams that have no secret (aws + azure) (https://github.com/solo-io/gloo/issues/5253)
• Run the CertGen CronJob with 'force-rotation' flag so it will make the rotation (https://github.com/solo-io/gloo/issues/4638)
• Fix bug where regex route short-circuiting was reported when it shouldn't have been. (https://github.com/solo-io/gloo/issues/5958)
• Un-nest the IntrospectionValidation and JwtValidation fields from AccessTokenValidation to help with CRD schema gen. (https://github.com/solo-io/gloo-portal-issues/issues/49)

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.20.0-patch4.

Fixes

• Fixes Envoy CVEs CVE-2021-43826, CVE-2021-43824, CVE-2022-21654, CVE-2022-21655, CVE-2021-43825, CVE-2022-23606. (https://github.com/solo-io/solo-projects/issues/3037)
• Fix bug where regex route short-circuiting was reported when it shouldn't have been. (https://github.com/solo-io/gloo/issues/5958)

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.20.0-patch4.

Fixes

• Fixes Envoy CVEs CVE-2021-43826, CVE-2021-43824, CVE-2022-21654, CVE-2022-21655, CVE-2021-43825, CVE-2022-23606. (https://github.com/solo-io/solo-projects/issues/3037)
• Fix bug where regex route short-circuiting was reported when it shouldn't have been. (https://github.com/solo-io/gloo/issues/5958)

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.19.0-patch5.

Fixes

• Fixes Envoy CVEs CVE-2021-43826, CVE-2021-43824, CVE-2022-21654, CVE-2022-21655, CVE-2021-43825. (https://github.com/solo-io/solo-projects/issues/3037)
• Fix bug where regex route short-circuiting was reported when it shouldn't have been. (https://github.com/solo-io/gloo/issues/5958)

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to 1.20.0-patch3.

Fixes

• Make sure that aws lambda refresh and propagation of origin are always respected (https://github.com/solo-io/gloo/issues/5253)
• glooctl get us will no longer panic on upstreams that have no secret (aws + azure) (https://github.com/solo-io/gloo/issues/5253)
• Run the CertGen CronJob with 'force-rotation' flag so it will make the rotation (https://github.com/solo-io/gloo/issues/4638)
• Add configuration status metric support for UpstreamGroup CRs (https://github.com/solo-io/gloo/issues/5935)

New Features

• Add new option settings.Gloo.removeunusedfilters When set to true do not add filters to hcm filter_chain in envoy if they have nothing relying on them. (https://github.com/solo-io/gloo/issues/5651)
• Introduce httpgateways.gateway.solo.io CRD.
  HybridGateways can delegate to this resource, instead of requiring the
  entire definition to be inline. (https://github.com/solo-io/gloo/issues/5767)

Fixes

• Prevent glooctl check from producing stackdumps. (https://github.com/solo-io/gloo/issues/5061)

New Features

• Introduce httpgateways.gateway.solo.io CRD.
  HybridGateways can delegate to this resource, instead of requiring the
  entire definition to be inline. (https://github.com/solo-io/gloo/issues/5767)

Fixes

• Prevent glooctl check from producing stackdumps. (https://github.com/solo-io/gloo/issues/5061)

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to 1.20.0-patch3.

New Features

• Validate the integrity of TLS secrets, allowing users to call glooctl check to identify bad TLS configuration (https://github.com/solo-io/gloo/issues/5662)

New Features

• Adds support for the Envoy HTTP Connection Manager settings headers_with_underscores_action and max_requests_per_connection.
  Additionally, adds support for the HTTP Connection Manager allow_chunked_length setting and the cluster-level max_concurrent_streams setting (https://github.com/solo-io/gloo/issues/5762)
• Enables you to force cert rotation, even if the existing certificates are still valid (https://github.com/solo-io/gloo/issues/5855)

Fixes

• Ensure that enterprise features, when used by an open source user, produce error messages (https://github.com/solo-io/gloo/issues/4020)
• Remove the Upgradable Plugin interface. This abstraction was a little leaky. Now we handle upgrading plugins in the enterprise application itself, as that is the source of truth for what should be upgraded. (https://github.com/solo-io/gloo/issues/4367)
• Add a helm option to support running the certgen job on upgrades and installs (https://github.com/solo-io/gloo/issues/4638)

New Features

• Add new option settings.Gloo.removeunusedfilters When set to true do not add filters to hcm filter_chain in envoy if they have nothing relying on them. (https://github.com/solo-io/gloo/issues/5651)