v1.16.15

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.27.6-patch1.

v1.17.0-rc2

Helm Changes

• Rename the kube gateway envoy container image helm value from kubeGateway.gatewayParameters.glooGateway.image to kubeGateway.gatewayParameters.glooGateway.envoyContainer.image. (solo-io/solo-projects#6107)

New Features

• 1. Add API for running postRouting transformations. This means that the transformation filter
     will be run as a part of the router filter, rather than during the standard HTTP filter chain.
     This allows access to endpoint specific information which is not available during the standard
     fiter chain.

2. Add API for adding metadata to endpoints in static/failover upstreams. This metadata can
   then be accessed in the transformation filter mentioned above.
3. Add new plugin type to allow adding filter in the upstream filter chain. (solo-io/solo-projects#5890)

Fixes

• Properly pass through the json_to_proto value from the gloo API to the envoy API for dynamic metadata transformations. (solo-io/solo-projects#5890)

v1.17.0-rc1

Helm Changes

• Add k8s Gateway Istio integration values to the Gloo Gateway Helm chart under kubeGateway.gatewayParameters.glooGateway. (solo-io/solo-projects#5743)

Fixes

• Adds error types for plugins errors to differentiate between validation errors and validation warnings in order to support preventing the validation webhook rejecting config due to eventual consistency issues with the RateLimitConfig resource. (solo-io/solo-projects#6251)
• Changing error type to warning will deflake the validation webhook rejecting config due to eventual consistency issues with the RateLimitConfig resource. (solo-io/solo-projects#5307)
• Adds initial error types for plugins errors to differentiate between validation errors and validation warnings. (#7357)

v1.17.0-beta35

New Features

• New CRDs added for ListenerOption and HttpListenerOption resources (solo-io/solo-projects#5941)
• Add ListenerOption as a policy resource for use with Kube Gateway API objects.
  Note that this resource can not currently be used as a standalone resource (i.e. delegated option) for the Gloo Edge API. (solo-io/solo-projects#5941)

v1.17.0-beta34

Helm Changes

• Mark Istio integration helm values that rely on double proxy setup as deprecated. This includes: - global.istioIntegration.labelInstallNamespace - global.istioIntegration.whitelistDiscovery - global.istioIntegration.enableIstioSidecarOnGateway - global.istioIntegration.istioSidecarRevTag - global.istioIntegration.appendXForwardedHost (solo-io/solo-projects#5743)

New Features

• gateway2: enable self-managed Gateways

Adds capability to integrate self-managed gateways
that are not meant to be auto-provisioned by the
controller. This is required to support use cases
where gateways are statically provisioned, such
as when running the gateways external to k8s on
VMs.

It adds a selfManaged field to the GatewayParameters
CRD which is used to skip the deployment of Gateway
related objects (deployment, service, etc.). When
a gateway is self-managed, it is expected to be
correctly bootstrapped with an envoy config that
matches the Gateway resource's name and namespace,
specifically the node field must be configured
correctly to link a self-managed gateway to the
Gateway resource. (solo-io/solo-projects#6196)

Fixes

• Resolves issue where default GatewayParameters could be passed invalid fields and fail to render (solo-io/solo-projects#6257)
• Fix bug in glooctl get proxy that returned duplicate proxies. (solo-io/solo-projects#6088)

v1.17.0-beta33

Dependency Bumps

• k8s.io/api has been upgraded to v0.29.2.
• k8s.io/apiextensions-apiserver has been upgraded to v0.29.2.
• k8s.io/apimachinery has been upgraded to v0.29.2.
• k8s.io/apiserver has been upgraded to v0.29.2.
• k8s.io/cli-runtime has been upgraded to v0.29.2.
• k8s.io/client-go has been upgraded to v0.29.2.
• sigs.k8s.io/code-generator has been upgraded to v0.29.2.
• sigs.k8s.io/component-base has been upgraded to v0.29.2.
• sigs.k8s.io/component-helpers has been upgraded to v0.29.2.
• sigs.k8s.io/kubectl has been upgraded to v0.29.2.
• sigs.k8s.io/metrics has been upgraded to v0.29.2.
• sigs.k8s.io/controller-runtime has been upgraded to v0.17.4.
• onsi/ginkgo/v2 has been upgraded to v2.14.0.
• onsi/gomega has been upgraded to v1.30.0.
• go.uber.org/zap has been upgraded to v1.26.0.
• solo-io/k8s-utils has been upgraded to v0.7.2.
• solo-io/skv2 has been upgraded to v0.39.1.
• solo-io/solo-apis has been upgraded to sa-k8s-1.29-bump.
• solo-io/solo-kit has been upgraded to v0.35.0.

Breaking Changes

• Deprecate Gloo Edge as an Ingress Controller (#8978)
• The ErrNoSupportedSidecar has been removed from the projects/gloo/cli/pkg/cmd/istio/sidecars package as we no longer support any versions that would trigger this error. (#8990)

Helm Changes

• Startup probe has been enabled by default in Istio helm charts. See Istio 1.20.0 release notes for more information and halm values to revert the startup probe enablement. (#8990)

Fixes

• Fix issue where upstream creation/deletion were not being reconciled by the K8s Gateway controller. (solo-io/solo-projects#6222)

v1.17.0-beta32

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.30.1-patch1.

Helm Changes

• Introduced new fields to kubeGateway top-level field which configure the deployed Gateway proxies generated from a Gateway. Also introduced a new default GatewayParameters to be rendered when kubeGateway.enabled=true. This contains defaults for Istio/SDS, as well as things like envoy image, deployment replicas, and extra labels in the pod template. (solo-io/solo-projects#6107)

New Features

• Introduced a new default GatewayParameters which is associated with a GatewayClass and represents the default values applied to Gateways created from that GatewayClass that don't otherwise have a specific GatewayParameters attached. (solo-io/solo-projects#6107)
• gateway2/delegation: enable optional parent matcher inheritance

In the current design, a child route must have route matchers
that match the parent's to be considered in the delegation chain.

There's a request to enable matcher inheritance from the parent
such that instead of child routes needing to specify paths
that include the parent's path as prefix, they instead inherit
the parent prefix, headers, query params, etc. The result
is that the paths specified by child routes are relative
to the parent paths. Headers and query params are merged
from the parent into the child while giving preference to
parent matchers in case of conflicts. (solo-io/solo-projects#6228)

Fixes

• Added default service type of LoadBalancer to default GatewayParameters. This value will be inherited by each deployed gateway proxy unless it is overridden in a GatewayParameters attached to the Gateway resource which generated it. (solo-io/solo-projects#6113)
• Fixes bug that prevented deleted HTTPRoutes from being fully reconciled to proxies (#9508)
• Make GatewayParameters fields nullable so they are more easily overridable. (solo-io/solo-projects#6107)

v1.17.0-beta31

Fixes

• Set the previously-missing HTTPS listener data when the listeners are translated. (solo-io/solo-projects#6201)

v1.17.0-beta30

This release contained no user-facing changes.

v1.16.14

Dependency Bumps

• solo-io/k8s-utils has been upgraded to v0.6.3.

Helm Changes

• • Add helm values for all containers to allow defining containers' securityContexts * Add global.podSecurityStandards.enableRestrictedContainerDefaults to default to using a restricted set of container defaults * Add new helper template to render the container securityContexts and apply the defaults if neccessary (#8864)

Fixes

• Add helm values for all containers to allow for conforming to Pod Security Standards (#8864)