v1.5.0

This release enables installations of Authorino Operator v0.25.1, Limitador Operator v0.18.2, DNS Operator v0.17.0, WASM Shim v0.14.1, ConsolePlugin v0.4.0 and Developer Portal Controller v0.2.0

What's Changed

Exciting New Features 🎉

• feat(extension/grpc): add RegisterUpstreamMethod RPC to proto by @KevFan in #1798
• feat(extension/types): add UpstreamConfig, RegisterUpstreamMethod and ErrUpstreamUnreachable by @KevFan in #1807
• feat: source attribute for auth config & limitador limits spans by @KevFan in #1768
• Add GRPCRoute support to AuthPolicy by @mikenairn in #1855
• Add GRPCRoute support to RateLimitPolicy by @mikenairn in #1881
• Add GRPCRoute support to PlanPolicy by @mikenairn in #1897
• new developer portal APIs: APIKeyRequest, APIKeyApproval by @eguzki in #1952

Bug Fixing 🐞

• fix: clear stale trace annotations before injecting fresh ones on resource updates by @KevFan in #1878

Other Changes

• docs(CEL): introduction to CEL by @alexsnaps in #1746
• GH action release job uses KUADRANT_DEV_PAT to trigger other workflows by @eguzki in #1765
• CoreDNS integration docs by @maksymvavilov in #1745
• docs: comprehensive observability tracing improvements by @crstrn13 in #1747
• fix: replace wasm filter or modules with correct naming. by @crstrn13 in #1770
• Update Envoy Gateway by @adam-cattermole in #1773
• fix: use sail operator in the examples. by @crstrn13 in #1775
• Enable s390x (IBM Z/Linux) support by @vinayakray19 in #1771
• fix: olm.bundle image/relatedImages stricter format validation by @averevki in #1788
• RegisterUpstreamMethod design doc by @philbrookes in #1786
• Nightly builds by @eguzki in #1789
• docs: control plane config explaination for limiator operator and authorino by @KevFan in #1780
• Extend RegisteredDataStore with upstream storage by @philbrookes in #1806
• Delete .github/CODEOWNERS by @david-martin in #1813
• nightly schedule @ 0 2 AGENTS.md CLAUDE.md Dockerfile LICENSE MAINTAINERS.md Makefile PROJECT README.md RELEASE.md api bundle bundle.Dockerfile catalog charts cmd config doc examples extension.Dockerfile go.mod go.sum grafana hack internal jsonnetfile.json jsonnetfile.lock.json make pkg release.yaml tests utils AGENTS.md CLAUDE.md Dockerfile LICENSE MAINTAINERS.md Makefile PROJECT README.md RELEASE.md api bundle bundle.Dockerfile catalog charts cmd config doc examples extension.Dockerfile go.mod go.sum grafana hack internal jsonnetfile.json jsonnetfile.lock.json make pkg release.yaml tests utils AGENTS.md CLAUDE.md Dockerfile LICENSE MAINTAINERS.md Makefile PROJECT README.md RELEASE.md api bundle bundle.Dockerfile catalog charts cmd config doc examples extension.Dockerfile go.mod go.sum grafana hack internal jsonnetfile.json jsonnetfile.lock.json make pkg release.yaml tests utils by @eguzki in #1815
• Implement client-side RegisterUpstreamMethod by @philbrookes in #1816
• docs: authoring metapolicies guide by @adam-cattermole in #1753
• Implement server-side RegisterUpstreamMethod handler by @philbrookes in #1818
• Extend extension reconcilers with registered upstream support by @philbrookes in #1828
• Remove out of date todo item by @philbrookes in #1839
• Reflection and dynamic endpoints design doc by @adam-cattermole in #1817
• Refactor UpstreamPolicy to ThreatPolicy extension by @philbrookes in #1846
• ci: adjust nightlies cron to build earlier by @averevki in #1858
• Upgrade Go to 1.25.8 by @thomasmaas in #1852
• Upgrade gRPC-Go to 1.79.3 by @thomasmaas in #1854
• fix: enable --race in unit tests and fix data race in TestOOPExtensionForwardsLog by @KevFan in #1860
• [X.509] Implement X.509 Support in AuthPolicy API by @guicassolato in #1857
• fix: ensure limitador limits span attributes appear consistently by @crstrn13 in #1869
• remove threatpolicy crd from the bundle manifests by @guicassolato in #1883
• Support HTTPRoute-targeted upstreams in extension reconcilers by @philbrookes in #1861
• Proposal: Extensions SDK API to orchestrate actions in a pipeline. by @philbrookes in #1895
• Update github.com/kuadrant/policy-machinery to v0.8.0 by @guicassolato in #1879
• doc: update action pipeline design proposal by @philbrookes in #1909
• ci: add e2e smoke tests workflow by @averevki in #1783
• Extensions gRPC proto cache and client by @adam-cattermole in #1822
• docs: DNS-based routing guide for egress gateway by @maksymvavilov in #1856
• doc: document MessageTemplate processing in action pipeline design by @philbrookes in #1917
• Disable e2e smoke tests when merging from fork branches by @averevki in #1918
• docs: egress gateway setup and rate limiting guide by @maksymvavilov in #1896
• Add Istio egress gateway local dev environment by @maksymvavilov in #1865
• fix: add missing grpc service bundle manifest by @mikenairn in #1925
• ci: add verify-manifests by @mikenairn in #1882
• docs: credential injection guide for egress gateway by @maksymvavilov in #1893
• Unified route policy discoverability reconciler with GRPCRoute support by @mikenairn in #1927
• ci: add extension manifests to verify-manifests by @mikenairn in #1930
• Document X.509 client certificate authentication support by @guicassolato in #1924
• docs: clarify supported OTLP protocols for Kuadrant CR tracing endpoint by @silvi-t in #1929
• X.509 Client Authentication User Guides (Tiers 1, 2 and 3) by @guicassolato in #1931
• Fix issues in the X.509 authentication docs by @guicassolato in #1938
• docs: add GRPCRoute support to policy documentation by @mikenairn in #1939
• RBAC for Gateway API Personas by @eguzki in #1911
• Upgrade Go to 1.25.9 by @thomasmaas in #1945
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.38.0 to 1.43.0 by @dependabot[bot] in #1875
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp from 0.14.0 to 0.19.0 by @dependabot[bot] in #1872
• fix: respect CONTAINER_ENGINE in docker-network-ipaddresspool.sh by @crstrn13 in #1940
• Add extensions pipeline Request/Response actions by @philbrookes in #1946
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.38.0 to 1.43.0 by @dependabot[bot] in #1873
• Cache Kuadrant CR lookup in reconciliation state to fix scaling performance by @Boomatang in #1957
• Adopt RFC 0018 release branch naming (release-X.Y) by @thomasmaas in #1982
• developer portal API update: APIKey use case optional by @eguzki in #1983
• Fix WasmPlugin comparison to allow order-insensitive equality checks by @Boomatang in #1923
• developer-portal-controller: delete permission on apikeyapproval by @eguzki in #1987
• Fix version regex to reject bare + or - suffix by @thomasmaas in #1989
• Use kustomize directory ref for developer-portal CRDs by @thomasmaas in #1990
• fix: pass dependency versions to make bundle in release script by @thomasmaas in #1991
• Use EnvoyFilter in lieu of WasmPlugin to install our Wasm Filter by @alexsnaps in #1953
• feat: Extension SDK action pipeline improvements by @philbrookes in #1986
• devportal-finalzier-rbac by @R-Lawton in #1992
• feat(wasm): allow_on_headers_stop_iteration on our PluginConfig by @alexsnaps in #1993
• Remove oauth_token response header from console plugin nginx config by @thomasmaas in #1997
• [Release] Kuadrant Operator v1.5.0-rc1 by @kuadrant-dev in #2019
• [Release] Kuadrant Operator v1.5.0-rc2 by @thomasmaas in #2029
• Release 1.5.0 rc3 by @eguzki in #2065
• release 1.5.0 by @eguzki in #2069

New Contributors

• @vinayakray19 made their first contribution in #1771
• @averevki made their first contribution in #1788
• @silvi-t made their first contribution in #1929

Full Changelog: v1.4.5...v1.5.0