gloo

Fixes

• Use the form3tech-oss fork of jwt-go to fix CVE. (https://github.com/solo-io/gloo/issues/4722)

Dependency Bumps

• solo-io/go-utils has been upgraded to v0.21.7.
• solo-io/k8s-utils has been upgraded to v0.0.8.
• solo-io/solo-kit has been upgraded to v0.19.1.

Fixes

• Use the form3tech-oss fork of jwt-go. (https://github.com/solo-io/gloo/issues/4722)

This release build failed.

This release contained no user-facing changes.

This release contained no user-facing changes.

This release contained no user-facing changes.

This release contained no user-facing changes.

This release build failed.

Helm Changes

• Remove duplicate helm values that are no longer needed to keep hook-created values in helm releases. Backport for version 1.4 (https://github.com/solo-io/gloo/issues/3498)

Fixes

• Make glooctl debug command respect -f flag for unzipped log output (https://github.com/solo-io/gloo/issues/3604)

This release contained no user-facing changes.

This release build failed.

This release contained no user-facing changes.

This release contained no user-facing changes.

Fixes

• Reverts adding the buffer filter to the filter chain by default when route and vh buffer config is added. (https://github.com/solo-io/gloo/issues/4000)

Fixes

• Reverts adding the buffer filter to the filter chain by default when route and vh buffer config is added. (https://github.com/solo-io/gloo/issues/4000)

Dependency Bumps

• solo-io/go-utils has been upgraded to v0.21.7.
• solo-io/k8s-utils has been upgraded to v0.0.8.
• solo-io/solo-kit has been upgraded to v0.19.1.

Fixes

• Reverts adding the buffer filter to the filter chain by default when route and vh buffer config is added. (https://github.com/solo-io/gloo/issues/4000)
• Use the form3tech-oss fork of jwt-go to fix CVE. (https://github.com/solo-io/gloo/issues/4722)

Helm Changes

• Allow pod security context to be disabled for discovery and gateway-proxy deployments. This is necessary for kubernetes distributions without security context constraints (ie OCP). (https://github.com/solo-io/gloo/issues/4778)

Dependency Bumps

• solo-io/solo-kit has been upgraded to v0.19.0.

New Features

• Add structual schemas to Gloo Edge CRDs
  (https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#specifying-a-structural-schema) (https://github.com/solo-io/gloo/issues/2108)

Fixes

• Prevent invalid AuthConfig from blocking subsequent AuthConfigs from being processed (https://github.com/solo-io/gloo/issues/4055)

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.18.2-patch1.

New Features

• Update API to support DLP masking on enterprise access logs (https://github.com/solo-io/gloo/issues/4282)

Fixes

• Fixes bug introduced in gloo v1.8.0-beta14 which didn't allow gloo enterprise helm charts to render. (https://github.com/solo-io/gloo/issues/4767)

New Features

• Added override fields to the helm values, which can be used to override arbitrary fields
  in the generated k8s resources without requiring new helm logic to be implemented. (https://github.com/solo-io/gloo/issues/4711)

Helm Changes

• Add affinity, tolerations, nodeName, hostAliases, nodeSelector, and restartPolicy to helm chart for all gloo open source k8s Deployments and Jobs. (https://github.com/solo-io/gloo/issues/1995)

Fixes

• Automatically reload webhook certificate and private key from mounted secrets files if they changed. (https://github.com/solo-io/gloo/issues/4624)

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.19.0-rc2.
• envoyproxy/go-control-plane has been upgraded to v0.9.9-0.20210511190911-87d352569d55.
• solo-io/solo-kit has been upgraded to v0.18.5.
• solo-io/envoy-gloo has been upgraded to v1.19.0-rc3.
• dgrijalva/jwt-go has been upgraded to v4.0.0-preview1.
• linux/alpine has been upgraded to 3.13.5.
• solo-io/go-utils has been upgraded to v0.21.5.

Helm Changes

• Expose warnRouteShortCircuiting validation option in helm chart. (https://github.com/solo-io/gloo/issues/4631)

New Features

• Update API to support DLP masking on enterprise access logs (https://github.com/solo-io/gloo/issues/4282)
• Exposes envoy functionality to configure max direct response body size. (https://github.com/solo-io/gloo/issues/4560)
• Adds support for integration with Istio 1.9.x (https://github.com/solo-io/gloo/issues/4153)
• Exposes envoy functionality to define tracing custom tags based on environment variables and literals. (https://github.com/solo-io/gloo/issues/4699)

Fixes

• Autogenerate filter types that glooctl proxy served-config depends on to prevent breaking (https://github.com/solo-io/gloo/issues/4665)
• Expose hcm options needed for CVE-2021-29492 (https://github.com/envoyproxy/envoy/security/advisories/GHSA-4987-27fx-x6cf). By default, Envoy's behavior does not change to address this vulnerability. The desired Http Connection Manager PathWithEscapedSlashesAction setting option must be defined on gateways. (https://github.com/solo-io/gloo/issues/4727)
• Remove trailing whitespace from helm templates to make gateway-proxy-envoy-config configmap readable. (https://github.com/solo-io/gloo/issues/4645)
• Update the Docker Compose docs to work with Gloo Edge 1.7+ (https://github.com/solo-io/gloo/issues/4692)
• Fix setting of stat server log level when using the LOG_LEVEL environment variable (https://github.com/solo-io/gloo/issues/4648)
• Fix typo is istioMetaClusterId helm chart value (https://github.com/solo-io/gloo/issues/4667)
• Updates the init-plugin-manager command to match meshctl (no external install script). (https://github.com/solo-io/gloo/issues/4306)