gloo

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.23.12-patch1.
• solo-io/k8s-utils has been upgraded to v0.1.10.

Fixes

• Pulls in upstream Envoy v1.23.12, which includes fixes for CVE-2023-35941, CVE-2023-35942, CVE-2023-35944, and CVE-2023-35945. (https://github.com/solo-io/solo-projects/issues/5138)
• Fix typo in helm template when rendering multiple Gateways. (https://github.com/solo-io/gloo/issues/8404)

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.23.12-patch1.

Fixes

• Pulls in upstream Envoy v1.23.12, which includes fixes for CVE-2023-35941, CVE-2023-35942, CVE-2023-35944, and CVE-2023-35945. (https://github.com/solo-io/solo-projects/issues/5138)

This release contained no user-facing changes.

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.26.2-patch3.
• envoyproxy/go-control-plane has been upgraded to v0.11.1.
• envoyproxy/protoc-gen-validate has been upgraded to v1.0.1.
• google.golang.org/grpc has been upgraded to v1.55.0.
• google.golang.org/protobuf has been upgraded to v1.30.0.

New Features

• Use later version of Inja for transformations (Version 3.4) which provides access to numerous new templating features. (https://github.com/solo-io/gloo/issues/8177)

Fixes

• When modifying gateways that depend on TCP upstreams that do not exist, report these validation issues not as errors, but as warnings instead (https://github.com/solo-io/solo-projects/issues/5163)

Fixes

• When modifying gateways that depend on TCP upstreams that do not exist, report these validation issues not as errors, but as warnings instead (https://github.com/solo-io/solo-projects/issues/5163)

This release contained no user-facing changes.

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.25.8-patch1.

Helm Changes

• Allow configuring gateway proxy Envoy statistics configuration (https://github.com/solo-io/gloo/issues/5537)

Fixes

• Pulls in upstream Envoy v1.25.8-patch1, which includes a fix for CVE-2023-35945 (https://github.com/solo-io/solo-projects/issues/5138)

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.25.8-patch1.

Fixes

• Pulls in upstream Envoy v1.25.8-patch1, which includes a fix for CVE-2023-35945 (https://github.com/solo-io/solo-projects/issues/5138)

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.23.11-patch1.

Fixes

• Pulls in upstream Envoy v1.23.11, which includes a fix for CVE-2023-35945 (https://github.com/solo-io/solo-projects/issues/5138)

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.23.11-patch1.

Fixes

• Pulls in upstream Envoy v1.23.11, which includes a fix for CVE-2023-35945 (https://github.com/solo-io/solo-projects/issues/5138)

Helm Changes

• Allow configuring gateway proxy Envoy statistics configuration (https://github.com/solo-io/gloo/issues/5537)

New Features

• Add support for CORS on direct response by configuring ResponseHeadersToAdd. (https://github.com/solo-io/gloo/issues/7336)
• Add fields to the API to allow Envoy to set x-fowarded-host and x-forwarded-post headers. (https://github.com/solo-io/gloo/issues/7683)

This release contained no user-facing changes.

Fixes

• Fix a panic caused by a nil pointer dereference when reporting errors in aggregate filter translator (https://github.com/solo-io/gloo/issues/8405)

Fixes

• Fix a panic caused by a nil pointer dereference when reporting errors in aggregate filter translator (https://github.com/solo-io/gloo/issues/8405)

This release contained no user-facing changes.

Helm Changes

• Fixed bug where runAsUser was improperly being rendered with a value of 0 instead of being omitted. Also updated tests that should have caught the bug. (https://github.com/solo-io/gloo/issues/8387)

Fixes

• Fixes an issue which prevented the global setting (gloo.logTransformationRequestResponseInfo) for transformation logging from being respected. (https://github.com/solo-io/gloo/issues/8266)

Helm Changes

• Fixed bug where runAsUser was improperly being rendered with a value of 0 instead of being omitted. Also updated tests that should have caught the bug. (https://github.com/solo-io/gloo/issues/8387)

Fixes

• Fixes an issue which prevented the global setting (gloo.logTransformationRequestResponseInfo) for transformation logging from being respected. (https://github.com/solo-io/gloo/issues/8266)

New Features

• Adds a user guide for new transformation debug logging functionality. (https://github.com/solo-io/gloo/issues/8266)

Fixes

• Fixes an issue when setting proxyprotocol on an upstream that was also static. (https://github.com/solo-io/solo-projects/issues/4760)
• Fixes overlapping sni when using the new matcher framework for filters (https://github.com/solo-io/solo-projects/issues/4982)
• Update to support tcp when isolating on filterchains on virtual services. Previously when not isolating filter chains tcp and http could coexist by matcher. Now when isolated tcp is not ignored (previously ignored on delegated and warned on inline). (https://github.com/solo-io/solo-projects/issues/4982)
• Add a field for the enterprise passthrough feature. The new field allows for a subsection of ciphers to be considered for tls termination. (https://github.com/solo-io/solo-projects/issues/5044)