gloo

Fixes

• Ensure proxy reconciliaton does not duplicate virtual hosts (https://github.com/solo-io/gloo/issues/3247)

Fixes

• Ensure proxy reconciliaton does not duplicate virtual hosts (https://github.com/solo-io/gloo/issues/3247)

Dependency Bumps

• solo-io/solo-kit has been upgraded to v0.21.1.

New Features

• Extend SubsetSpec to include Envoy options fallbackPolicy, defaultSubset, single_host_per_subset (https://github.com/solo-io/gloo/issues/5024)

Fixes

• Fix glooctl dashboard cmd (https://github.com/solo-io/gloo/issues/5010)
• Ensure proxy reconciliaton does not duplicate virtual hosts (https://github.com/solo-io/gloo/issues/3247)
• Ensure schemas for int64 fields include x-kubernetes-int-or-string (https://github.com/solo-io/gloo/issues/5043)
• Do not include descriptions with validation schemas (https://github.com/solo-io/gloo/issues/4789)

Dependency Bumps

• solo-io/solo-kit has been upgraded to v0.20.2.

Fixes

• Make generated route names more unique to avoid duplicate name errors in the ratelimit plugin. (https://github.com/solo-io/gloo/issues/4769)
• Fix glooctl dashboard cmd (https://github.com/solo-io/gloo/issues/5010)
• Ensure schemas for int64 fields include x-kubernetes-int-or-string (https://github.com/solo-io/gloo/issues/5043)
• Do not include descriptions with validation schemas (https://github.com/solo-io/gloo/issues/4789)

Fixes

• Make generated route names more unique to avoid duplicate name errors in the ratelimit plugin. (https://github.com/solo-io/gloo/issues/4769)

Fixes

• Make generated route names more unique to avoid duplicate name errors in the ratelimit plugin. (https://github.com/solo-io/gloo/issues/4769)

Fixes

• Make generated route names more unique to avoid duplicate name errors in the ratelimit plugin. (https://github.com/solo-io/gloo/issues/4769)

Fixes

• Ensure the annotations for custom gateway-proxy services do not contain
  references to the default gateway-proxy service annotations (https://github.com/solo-io/gloo/issues/4914)
• Support specifiying virtual services with expressions similar to the ones used for route tables (backport). (https://github.com/solo-io/gloo/issues/4154)

New Features

• In static upstreams, support specifying LoadBalancingWeight on hosts. When the round robin load balancing policy is in place and LoadBalancingWeight is provided a weighted round robin load balancing strategy will be used. (https://github.com/solo-io/gloo/issues/4872)
• Support specifiying virtual services with expressions similar to the ones used for route tables (https://github.com/solo-io/gloo/issues/4154)

New Features

• Add an ExtAuth config field opaAuth.options.fastInputConversion to configure optimized input conversion. (https://github.com/solo-io/gloo/issues/4918)

New Features

• Add an ExtAuth config field oauth2.oidcAuthorizationCode.sessionIdHeaderName to configure sending the Redis session id to the IDP on token exchange requests. (https://github.com/solo-io/gloo/issues/4210)

Dependency Bumps

• golang/go has been upgraded to v1.16.3.

Fixes

• Backport a fix to the default-gateways helm template to stop consuming a newline. (https://github.com/solo-io/gloo/issues/4646)
• Fixes "No Scan Found" dialog under the security scan docs for gloo-ee-envoy-wrapper. (https://github.com/solo-io/gloo/issues/4920)
• Ensure the annotations for custom gateway-proxy services do not contain
  references to the default gateway-proxy service annotations (https://github.com/solo-io/gloo/issues/4914)

Fixes

• Fixed gRPC EDS. Envoy clusters will now exit warming on cluster updates. (https://github.com/solo-io/gloo/issues/4901)
• Enables gRPC EDS by default and disables REST EDS by default. (https://github.com/solo-io/gloo/issues/4151)
• Fixes "No Scan Found" dialog under the security scan docs for gloo-ee-envoy-wrapper. (https://github.com/solo-io/gloo/issues/4920)
• Fixes go: command not found error observed during scheduled security scans (https://github.com/solo-io/gloo/issues/4944)
• Ensure the annotations for custom gateway-proxy services do not contain
  references to the default gateway-proxy service annotations (https://github.com/solo-io/gloo/issues/4914)

Fixes

• Fixed gRPC EDS. Envoy clusters will now exit warming on cluster updates. (https://github.com/solo-io/gloo/issues/4901)
• Enables gRPC EDS by default and disables REST EDS by default. (https://github.com/solo-io/gloo/issues/4151)
• Fixes "No Scan Found" dialog under the security scan docs for gloo-ee-envoy-wrapper. (https://github.com/solo-io/gloo/issues/4920)

Fixes

• Update the transport API version to v3 in extauth to leverage v3 features in enterprise for the multi extauth flow. Any custom extauth servers must now use extauth v3 API instead of v2. (https://github.com/solo-io/gloo/issues/4874)

Fixes

• Add warnings when users try to use enterprise-only Gloo Edge features when running the Open Source edition of Gloo Edge (https://github.com/solo-io/gloo/issues/4020)
• Introduce API for a new enterprise-only feature of configuring multiple ext auth servers in Settings. Allow for configuring an ext_authz filter that points to one of those servers per route. Allow stat_prefix to be enabled for an ext_authz filter. This is an additional prefix that is used when emitting statistics. (https://github.com/solo-io/gloo/issues/4874)
• Fix enterprise install commands to use latest patch version based off of the CLI minor version. (https://github.com/solo-io/gloo/issues/4555)

Breaking Changes

• Remove glooctl install federation. Remove glooctl uninstall federation. Remove --gloo-fed-file option from glooctl install gateway enterprise. Federation should now be installed/uninstalled alongside gloo enterprise by enabling/disabling the 'gloo-fed.enabled' helm value. (https://github.com/solo-io/gloo/issues/4556)

New Features

• (Enterprise only) Adds path and method options to failover endpoint-specific health check config. (https://github.com/solo-io/gloo/issues/4642)
• Introduced new VirtualHostOption and RouteOption CRDs, which allow users to externalize options configuration from VirtualHosts and Routes. Routes and VirtualHosts can now delegate options configuration to multiple of these custom resources, allowing config reuasability and less noisy Virtualhosts and Routes. (https://github.com/solo-io/gloo/issues/2484)

Fixes

• Fix broken Deployment manifest in OPA setup script (https://github.com/solo-io/gloo/issues/4834)

Breaking Changes

• The setting compressedProxySpec is now set in the helm chart with gateway.compressedProxySpec (instead of gatewayProxies.gatewayProxy.gatewaySettings.options.compressed_proxy_spec) Changed type of gatewayProxies.gatewayProxy.gatewaySettings.options from GatewayOptions to ListenerOptions. (https://github.com/solo-io/gloo/issues/4591)

New Features

• Add an ExtAuth config field oauth2.oidcAuthorizationCode.afterLogoutUrl to redirect to a specified endpoint after logout. (https://github.com/solo-io/gloo/issues/4391)
• Introduce API for a new enterprise-only feature of configuring multiple ext auth servers in Settings. Allow for configuring an ext_authz filter that points to one of those servers per route. Allow stat_prefix to be enabled for an ext_authz filter. This is an additional prefix that is used when emitting statistics. (https://github.com/solo-io/gloo/issues/4874)

Fixes

• Expose and document IstioMetaMeshId and IstioMetaClusterId for the glooctl istio inject cmd (https://github.com/solo-io/gloo/issues/4849)
• Ensure that the value for gateway.compressedProxySpec is set. Fix type mismatch between protobufs and helm templates. (https://github.com/solo-io/gloo/issues/4591)

New Features

• Implement enterprise-only advanced HTTP health checking API for envoy. Previously, Gloo supported per-endpoint paths in the HTTP health checking config on static upstreams. After this change we support per-endpoint method configuration of the HTTP health check requests to static upstreams, as well as complex regex json / regex parsing of the HTTP response to make determination on the HTTP health check response (rather than just look at the HTTP status, like upstream envoy). Regex/json parsing of the response can be configured in the ResponseAssertions field on the upstream's HTTP health check. (https://github.com/solo-io/gloo/issues/2837)

Fixes

• Gatway objects for custom proxies are still created when the default gateway proxy is disabled. (https://github.com/solo-io/gloo/issues/4696)
• The setting for enableRestEds is no longer ignored when glooMtls is enabled (https://github.com/solo-io/gloo/issues/4495)

Dependency Bumps

• solo-io/go-utils has been upgraded to v0.21.7.
• solo-io/solo-kit has been upgraded to v0.20.1.