gloo

This release contained no user-facing changes.

New Features

• Adds the requestTransform property to AWS destinationSpec, allowing users to easily forward incoming request headers to an AWS Lambda upstream. (https://github.com/solo-io/gloo/issues/3160)
• Add support for json output from glooctl check -o json. glooctl check continues to function as it did before. (https://github.com/solo-io/gloo/issues/4807)
• Expose the ignore_health_check_on_host_removal envoy cluster field on the Gloo Upstream proto (https://github.com/solo-io/gloo/issues/5276)
• Add docs and tests to integrate Gloo Edge with the xds-relay project as an xds cache to increase availability in the event of Gloo pod failure as an xds server. Update the helm chart to allow configuring Gloo Edge to look at the xds-relay pods to get xds config rather than from gloo directly. (https://github.com/solo-io/gloo/issues/4839)

Fixes

• Ensure that endpoints for invalid upstreams are deleted from snapshots and invalid upstreams are not accepted. (https://github.com/solo-io/gloo/issues/5022)

Fixes

• Run updates during Docker builds to get latest version of packages. (https://github.com/solo-io/gloo/issues/5235)
• Ensure that endpoints for invalid upstreams are deleted from snapshots and invalid upstreams are not accepted. (https://github.com/solo-io/gloo/issues/5022)

New Features

• Expose Envoy configuration for fetching JWKs in the background. (https://github.com/solo-io/gloo/issues/4838)

Fixes

• Fixing the gloo compressedProxySpec not working after the crd schemas introduction. (https://github.com/solo-io/gloo/issues/5287)
• Ensure that endpoints for invalid upstreams are deleted from snapshots and invalid upstreams are not accepted. (https://github.com/solo-io/gloo/issues/5022)

New Features

• Expose the API for for regex subgroups in the DLP transformation proto. (https://github.com/solo-io/gloo/issues/1592)

Fixes

• Fixing the gloo compressedProxySpec notworking after the crd schemas introduction. (https://github.com/solo-io/gloo/issues/5287)

New Features

• Expose the API for for regex subgroups in the user facing CustomAction proto for DLP transformations. (https://github.com/solo-io/gloo/issues/1592)

Helm Changes

• Adds support for a gloo.splitLogOutput helm value, which can be used to set SPLIT_LOG_OUTPUT in the gloo pod When the SPLIT_LOG_OUTPUT environment variable is specified, a global logger is created with the following characteristics: debug/info/warning are written to stdout, error/fatal/panic are written to stderr Configuration is otherwise identical to the default logger When SPLIT_LOG_OUTPUT is unspecified, logging configuration is unchanged (https://github.com/solo-io/gloo/issues/4833)
• Migrate to mergeOverwrite in gloo.util.merge helm helper to allow override a boolean property with the false value (https://github.com/solo-io/gloo/issues/5215)

New Features

• Expose the API for for regex subgroups in the DLP transformation proto. (https://github.com/solo-io/gloo/issues/1592)

Fixes

• Make sure clusterSpecifier always gets set during gloo translation loop. (https://github.com/solo-io/gloo/issues/5112)

Helm Changes

• Migrate to mergeOverwrite in gloo.util.merge helm helper to allow override a boolean property with the false value (https://github.com/solo-io/gloo/issues/5215)

Fixes

• Run updates during Docker builds to get latest version of packages. (https://github.com/solo-io/gloo/issues/5235)

Fixes

• Allow enum fields in resources to be specified with int values (https://github.com/solo-io/gloo/issues/5200)
• Fix oneof docs gen issue where not all one of fields are included in markdown descriptions. (https://github.com/solo-io/gloo/issues/5193)

New Features

• Adds support for glooctl istio inject in Istio 1.11.x. (https://github.com/solo-io/gloo/issues/5224)
• Adds documentation for using ClaimMatcher to specify how claims should be matched to values in JWT RBAC. (https://github.com/solo-io/gloo/issues/4873)
• Adds documentation for nested claim support in RBAC policies for JSON Web Tokens (JWT). (https://github.com/solo-io/gloo/issues/2744)

Fixes

• Add qualifier to the aws lambda function name for display with glooctl get upstreams (https://github.com/solo-io/gloo/issues/5211)
• Allow enum fields in resources to be specified with int values (https://github.com/solo-io/gloo/issues/5200)
• Documentation for installing FIPS data plane. (https://github.com/solo-io/solo-projects/issues/2420)
• Run updates during Docker builds to get latest version of packages. (https://github.com/solo-io/gloo/issues/5235)

Fixes

• Update envoy-gloo to 1.19.0-patch2 for CVE-2021-32777, CVE-2021-32779, CVE-2021-32781, CVE-2021-32778, and CVE-2021-32780. (https://github.com/solo-io/gloo/issues/5228)

Fixes

• Update envoy-gloo to 1.18.4-patch1 for CVE-2021-32777, CVE-2021-32779, CVE-2021-32781, CVE-2021-32778, and CVE-2021-32780. (https://github.com/solo-io/gloo/issues/5228)

Fixes

• Update envoy-gloo to 1.17.4-patch1 for CVE-2021-32777, CVE-2021-32779, CVE-2021-32781, and CVE-2021-32778. (https://github.com/solo-io/gloo/issues/5228)

Dependency Bumps

• solo-io/solo-kit has been upgraded to v0.21.2.

New Features

• Add ClaimMatcher enum to support specifying how claims should be matched to values in JWT RBAC. (https://github.com/solo-io/gloo/issues/4873)

Fixes

• Fix potential NPEs by replacing all instances of protobuf-generated accessors with the getters for those structs. (https://github.com/solo-io/gloo/issues/5112)

New Features

• Add nested_claims_delimiter field in order to support for nested claims (rather than just top-level claims) in JWT RBAC. (https://github.com/solo-io/gloo/issues/2744)

This release contained no user-facing changes.

Fixes

• Remove validationServerGrpcMaxSize. Instead use validationServerGrpcMaxSizeBytes, which is a replacement for validationServerGrpcMaxSize. validationServerGrpcMaxSizeBytes is now an int32, which fixes the int64 version's broken functionality. (https://github.com/solo-io/gloo/issues/5085)