emissary

Changelog

• 65f43d1fe Adding collision testing
• 19a15543c Adding typed_json log format (#5270)
• 512c71f31 Fix routes shifting causing routing issues during a reconfiguration due to ordinal indexed route name
• c543058d6 Fix typo
• 3de3ff793 Formally remove myself as a maintainer
• 63222e20c Merge pull request #5423 from emissary-ingress/laustin/prep-v3.10-dev
• 644eba62f Merge pull request #5424 from emissary-ingress/alicewasko/route-shifting
• c11896ba6 Merge pull request #5467 from emissary-ingress/laustin/update-go
• 3ce2ba28c Merge pull request #5468 from emissary-ingress/laustin/crd-status
• d8831a40d Merge pull request #5504 from emissary-ingress/laustin/revert-envoy
• 56a235c1a Merge pull request #5521 from emissary-ingress/dd/update-maintainer-affiliation
• f621c33a4 Merge pull request #5522 from emissary-ingress/lukeshu/step-down
• 086914f23 Merge pull request #5532 from emissary-ingress/laustin/fix-apiext-namespaces
• 2bf8880e9 Merge pull request #5540 from emissary-ingress/laustin/apiext-debug
• a6afd065b Merge pull request #5549 from emissary-ingress/laustin/apiext-log
• 0fee7f95b Merge pull request #5554 from emissary-ingress/dependabot/go_modules/tools/src/golangci-lint/github.com/golangci/golangci-lint-1.56.1
• bd0dbefdb Merge pull request #5555 from emissary-ingress/dd/dependabot-actions
• 7b7d39e26 Merge pull request #5587 from emissary-ingress/laustin/maintainer-status-update
• 823968419 Revert "deps: bump go-control-plane with envoy 1.28 support"
• 1026db35a Revert "deps: update to envoy 1.28.0"
• 4b72366e2 Try gorel
• 31dd58752 Update MAINTAINERS.md
• 90d7afef2 Update docs links and CNCF Slack links
• 3b61f68cd Update maintainer affiliation
• 75b4a5e44 Update maintainers.md
• a760d0a84 Use docker.io/dwflynn for REGISTRY
• 576ff7de0 add transforms test
• cc9502a51 agent: make Ambassador Agent opt-in
• 2c21e7214 apiext: add configurable crd-label-selectors
• c8edb1626 apiext: add crd ca bundle check to ready probe
• 72bd2c7ae apiext: add e2e test
• 2cac062f7 apiext: add rbac for updating crd statuses
• 14acd8e8c apiext: address review feedback
• ed2aef94f apiext: adjust log levels and remove extra log lines
• 799c9a5a3 apiext: ignore conversion strategy None
• 42eab8ab6 apiext: pass configured ca namespace to cert manager
• 53a163151 apiext: remove crd label restriction
• 7a2e1b6d6 apiext: remove unnecessary log line
• cade34b2d apiext: rewrite internals and enhance capabilities
• 2c9cfaa93 cleanup: remove agent symlink from build
• f76e5d464 cleanup: remove ambassador_cli
• b2a901df2 cleanup: remove ert.py from cli
• 819628d48 cleanup: remove grab_snapshots.py
• ee7c77ad0 cleanup: remove k8sregistryctl cmd
• f89c3595e cleanup: remove kubewatch.py and associated python deps
• be9403d52 cleanup: remove mockery from cli
• 43aab8470 cleanup: remove post installers and no longer used files
• 71b981eeb cleanup: remove unused reproducer cmd
• a289c618a cleanup: remove watch_hook.py
• d04b904ab deps (python): bump black and urllib to layes
• 628aba93e deps(go): bump deps to address open dependabot prs
• 982be874e deps(golang): bump to latest 1.21.4 z-patch
• 5a7c9b90c deps(golang): upgrade to 1.21.5
• f772a0c33 deps: add github-action on dependabot
• bbfcd578a deps: bump github.com/hashicorp/consul/api to 1.26.1
• 85bba5d86 deps: bump go-control-plane with envoy 1.28 support
• 25e6949fa deps: bump golang.org/x/mod to v0.14.0
• e3944b055 deps: bump gorilla/websocket to v1.5.1
• 0ebded51d deps: bump k8s/* to v0.28.4
• 76985900e deps: signoff on golang-ci-lint
• 7b7be436c deps: update to envoy 1.28.0
• 2a12d65a4 fix-crds: add support for outputting independent files
• b43c95bd6 lint: remove dlog suggestion
• c57fc34b3 python: cleanup noop env-vars
• f9e27c94a python: fix integration test
• d781ecfb9 readme: fix broken emoji

🎉 Emissary Ingress 3.9.1 🎉

Emissary Ingress is an open source, Kubernetes-native microservices API gateway built on the Envoy Proxy.

Upgrade Emissary - https://www.getambassador.io/reference/upgrading.html
View changelog - https://github.com/emissary-ingress/emissary/blob/v3.9.1/CHANGELOG.md
Get started with Emissary on Kubernetes - https://www.getambassador.io/user-guide/getting-started

• Bugfix: Previously, after reconfiguration, routes could briefly be misconfigured due to a shift in
  the routes list. This has now been patched. Thanks to Joe
  Andaverde for contributing this bugfix!

🎉 Emissary Ingress Chart 8.9.1 🎉

Upgrade Emissary - https://www.getambassador.io/reference/upgrading#helm.html
View changelog - https://github.com/emissary-ingress/emissary/blob/master/charts/emissary-ingress/CHANGELOG.md

• Upgrade Emissary to v3.9.1 CHANGELOG
• Fix: Route Shifting Bug

🎉 Emissary Ingress 3.9.0 🎉

Emissary Ingress is an open source, Kubernetes-native microservices API gateway built on the Envoy Proxy.

Upgrade Emissary - https://www.getambassador.io/reference/upgrading.html
View changelog - https://github.com/emissary-ingress/emissary/blob/v3.9.0/CHANGELOG.md
Get started with Emissary on Kubernetes - https://www.getambassador.io/user-guide/getting-started

• Feature: This upgrades Emissary-ingress to be built on Envoy v1.27.2 which provides security,
  performance and feature enhancements. You can read more about them here: Envoy Proxy
  1.27.2 Release Notes

• Feature: By default, Emissary-ingress will return an UNAVAILABLE code when a request using gRPC
  is rate limited. The RateLimitService resource now exposes a new
  grpc.use_resource_exhausted_code field that when set to true, Emissary-ingress will return a
  RESOURCE_EXHAUSTED gRPC code instead. Thanks to Jerome
  Froelich for contributing this feature!

• Feature: Envoy runtime fields that were provided to mitigate the recent HTTP/2 rapid reset
  vulnerability can now be configured via the Module resource so the configuration will persist
  between restarts. This configuration is added to the Envoy bootstrap config, so restarting
  Emissary is necessary after changing these fields for the configuration to take effect.

• Change: APIExt would previously allow for TLS 1.0 connections. We have updated it to now only use
  a minimum TLS version of 1.3 to resolve security concerns.

• Change: - Update default image to Emissary-ingress v3.9.0.

• Bugfix: The APIExt server provides CRD conversion between the stored version v2 and the version
  watched for by Emissary-ingress v3alpha1. Since this component is required to operate
  Emissary-ingress, we have introduced an init container that will ensure it is available before
  starting. This will help address some of the intermittent issues seen during install and
  upgrades.

🎉 Emissary Ingress Chart 8.9.0 🎉

Upgrade Emissary - https://www.getambassador.io/reference/upgrading#helm.html
View changelog - https://github.com/emissary-ingress/emissary/blob/master/charts/emissary-ingress/CHANGELOG.md

• Upgrade Emissary to v3.9.0 CHANGELOG
• Feature: configure autoscaling behaviors for HorizontalPodAutoscaler in .Values.autoscaling.behavior
• Fix: wrong autoscaling apiVersion on EKS due to EKS not following semver (see https://github.com/aws/containers-roadmap/issues/1404, https://github.com/helm/helm/issues/10375, https://github.com/helm/helm/issues/12053)

🎉 Emissary Ingress 3.8.2 🎉

Emissary Ingress is an open source, Kubernetes-native microservices API gateway built on the Envoy Proxy.

Upgrade Emissary - https://www.getambassador.io/reference/upgrading.html
View changelog - https://github.com/emissary-ingress/emissary/blob/v3.8.2/CHANGELOG.md
Get started with Emissary on Kubernetes - https://www.getambassador.io/user-guide/getting-started

• Security: This release includes security patches to the current Envoy proxy version to address CVE
  2023-44487 and includes a fix to determine if a client is making too many requests with premature
  resets. The connection is disconnected if more than 50% of resets are considered premature.
  Another fix is also included which exposes a runtime setting to control the limit on the number of
  HTTP requests processed from a single connection in a single I/O cycle to mitigate CPU starvation.

• Security: Upgrading to the latest release of Golang as part of our general dependency upgrade
  process. This update resolves CVE-2023-39323 and CVE-2023-39325.

🎉 Emissary Ingress Chart 8.8.2 🎉

Upgrade Emissary - https://www.getambassador.io/reference/upgrading#helm.html
View changelog - https://github.com/emissary-ingress/emissary/blob/master/charts/emissary-ingress/CHANGELOG.md

🎉 Emissary Ingress 3.8.1 🎉

Emissary Ingress is an open source, Kubernetes-native microservices API gateway built on the Envoy Proxy.

Upgrade Emissary - https://www.getambassador.io/reference/upgrading.html
View changelog - https://github.com/emissary-ingress/emissary/blob/v3.8.1/CHANGELOG.md
Get started with Emissary on Kubernetes - https://www.getambassador.io/user-guide/getting-started

• Security: Upgrading to the latest release of Golang as part of our general dependency upgrade
  process. This includes security fixes for CVE-2023-39318, CVE-2023-39319.

🎉 Emissary Ingress Chart 8.8.1 🎉

Upgrade Emissary - https://www.getambassador.io/reference/upgrading#helm.html
View changelog - https://github.com/emissary-ingress/emissary/blob/master/charts/emissary-ingress/CHANGELOG.md

🎉 Emissary Ingress 3.8.0 🎉

Emissary Ingress is an open source, Kubernetes-native microservices API gateway built on the Envoy Proxy.

Upgrade Emissary - https://www.getambassador.io/reference/upgrading.html
View changelog - https://github.com/emissary-ingress/emissary/blob/v3.8.0/CHANGELOG.md
Get started with Emissary on Kubernetes - https://www.getambassador.io/user-guide/getting-started

• Bugfix: As of v2.2.2, if two mappings were associated with different Hosts through host
  mappingSelector labels but share the same prefix, the labels were not taken into account which
  would cause one Mapping to be correctly routed but the other not.
  This change fixes this issue so
  that Mappings sharing the same prefix but associated with different Hosts will be correctly
  routed. (Canary grouping must take labels into account)

• Bugfix: In previous versions, if multiple Headers/QueryParameters where used in a v3alpha1
  mapping, these values would duplicate and cause all the Headers/QueryParameters to have the same
  value. This is no longer the case and the expected values for unique Headers/QueryParameters will
  apply.
  This issue was only present in v3alpha1 Mappings. For users who may have this issue, please
  be sure to re-apply any v3alpha1 Mappings in order to update the stored v2 Mapping and resolve the
  issue.

• Change: When the Ambassador agent is being used, it will no longer attempt to collect and report
  Envoy metrics. In previous versions, Emissary-ingress would always create an Envoy stats sink for
  the agent as long as the AMBASSADOR_GRPC_METRICS_SINK environmet variable was provided. This
  environment variable was hardcoded on the release manifests and has now been removed and an Envoy
  stats sink for the agent is no longer created.

🎉 Emissary Ingress Chart 8.8.0 🎉

Upgrade Emissary - https://www.getambassador.io/reference/upgrading#helm.html
View changelog - https://github.com/emissary-ingress/emissary/blob/master/charts/emissary-ingress/CHANGELOG.md

🎉 Emissary Ingress 3.7.2 🎉

Emissary Ingress is an open source, Kubernetes-native microservices API gateway built on the Envoy Proxy.

Upgrade Emissary - https://www.getambassador.io/reference/upgrading.html
View changelog - https://github.com/emissary-ingress/emissary/blob/v3.7.2/CHANGELOG.md
Get started with Emissary on Kubernetes - https://www.getambassador.io/user-guide/getting-started

• Security: This upgrades Emissary-ingress to be built on Envoy v1.26.4 which includes a security
  fixes for CVE-2023-35942, CVE-2023-35943, VE-2023-35944.

🎉 Emissary Ingress Chart 8.7.2 🎉

Upgrade Emissary - https://www.getambassador.io/reference/upgrading#helm.html
View changelog - https://github.com/emissary-ingress/emissary/blob/master/charts/emissary-ingress/CHANGELOG.md

🎉 Emissary Ingress 3.7.1 🎉

Emissary Ingress is an open source, Kubernetes-native microservices API gateway built on the Envoy Proxy.

Upgrade Emissary - https://www.getambassador.io/reference/upgrading.html
View changelog - https://github.com/emissary-ingress/emissary/blob/v3.7.1/CHANGELOG.md
Get started with Emissary on Kubernetes - https://www.getambassador.io/user-guide/getting-started

• Security: This upgrades Emissary-ingress to be built on Envoy v1.26.3 which includes a security
  fix for CVE-2023-35945.

🎉 Emissary Ingress Chart 8.7.1 🎉

Upgrade Emissary - https://www.getambassador.io/reference/upgrading#helm.html
View changelog - https://github.com/emissary-ingress/emissary/blob/master/charts/emissary-ingress/CHANGELOG.md

🎉 Emissary Ingress 3.7.0 🎉

Emissary Ingress is an open source, Kubernetes-native microservices API gateway built on the Envoy Proxy.

Upgrade Emissary - https://www.getambassador.io/reference/upgrading.html
View changelog - https://github.com/emissary-ingress/emissary/blob/v3.7.0/CHANGELOG.md
Get started with Emissary on Kubernetes - https://www.getambassador.io/user-guide/getting-started

• Security: Upgrading to the latest release of Golang as part of our general dependency upgrade
  process. This includes security fixes for CVE-2023-24539, CVE-2023-24540, CVE-2023-29400.

• Feature: This upgrades Emissary-ingress to be built on Envoy v1.26.1. This provides
  Emissary-ingress with the latest security patches, performances enhancments, and features offered
  by the envoy proxy.

🎉 Emissary Ingress Chart 8.7.0 🎉

Upgrade Emissary - https://www.getambassador.io/reference/upgrading#helm.html
View changelog - https://github.com/emissary-ingress/emissary/blob/master/charts/emissary-ingress/CHANGELOG.md

🎉 Emissary Ingress 3.6.0 🎉

Emissary Ingress is an open source, Kubernetes-native microservices API gateway built on the Envoy Proxy.

Upgrade Emissary - https://www.getambassador.io/reference/upgrading.html
View changelog - https://github.com/emissary-ingress/emissary/blob/v3.6.0/CHANGELOG.md
Get started with Emissary on Kubernetes - https://www.getambassador.io/user-guide/getting-started

• Feature: This upgrades Emissary-ingress to be built on Envoy v1.25.4. This provides
  Emissary-ingress with the latest security patches, performances enhancments, and features offered
  by the envoy proxy.

🎉 Emissary Ingress Chart 8.6.0 🎉

Upgrade Emissary - https://www.getambassador.io/reference/upgrading#helm.html
View changelog - https://github.com/emissary-ingress/emissary/blob/master/charts/emissary-ingress/CHANGELOG.md

🎉 Emissary Ingress 3.5.2 🎉

Emissary Ingress is an open source, Kubernetes-native microservices API gateway built on the Envoy Proxy.

Upgrade Emissary - https://www.getambassador.io/reference/upgrading.html
View changelog - https://github.com/emissary-ingress/emissary/blob/v3.5.2/CHANGELOG.md
Get started with Emissary on Kubernetes - https://www.getambassador.io/user-guide/getting-started

• Security: Upgrading to the latest release of Golang as part of our general dependency upgrade
  process. This includes security fixes for CVE-2023-24537, CVE-2023-24538, CVE-2023-24534,
  CVE-2023-24536.

• Security: This upgrades Emissary-ingress to be built on Envoy v1.24.5 which contains security
  patches for CVE-2023-27487, CVE-2023-27491, CVE-2023-27492, CVE-2023-27493, CVE-2023-27488, and
  CVE-2023-27496.