2.2.0 🌈

What's New

• fix: set the Gateway status reasons Gateway API 1.6 requires (backport apache/apisix-ingress-controller#2843) @AlinsRan (#466)
• chore: log when kubernetes cluster version does not meet minimum requirement (backport apache/apisix-ingress-controller#2693) @AlinsRan (#465)
• fix: Ingress with ImplementationSpecific path panics when annotations are empty (backport apache/apisix-ingress-controller#2780) @AlinsRan (#463)
• fix: reject invalid plugin config instead of applying an empty one @shreemaan-abhishek (#441)
• chore(deps): upgrade dependencies flagged by security advisories @jarvis9443 (#459)
• fix: stop the status e2e tests demanding their old node ports back @jarvis9443 (#460)
• fix: read L4 routes and ReferenceGrant as v1 instead of the older versions @AlinsRan (#456)
• fix: normalize hosts and SNIs so uppercase hostnames stay routable @AlinsRan (#455)
• fix: rebuild the ADC baseline on leader acquisition @AlinsRan (#430)
• fix: honor TCPRoute/UDPRoute sectionName and listener port for StreamRoute matching @AlinsRan (#445)
• feat: allow L4 upstream schemes (tcp/tls/udp) for stream backends @AlinsRan (#449)
• fix: fail loud when enable-csrf is set but csrf-key annotation is missing @shreemaan-abhishek (#440)
• fix: preserve ApisixUpstream health check type @AlinsRan (#451)
• fix(httproute): read appProtocol for ExternalName services @AlinsRan (#450)
• feat: support port-based routing for Gateway API routes @AlinsRan (#419)
• fix: suppress cross-namespace Secret existence oracle in Consumer webhook @shreemaan-abhishek (#433)
• fix: never treat an unreachable API server as a missing API resource @AlinsRan (#444)
• feat: support Gateway API 1.6.0 @AlinsRan (#431)
• fix: parse hmac-auth signed_headers from Secret as a header list @shreemaan-abhishek (#436)
• fix: enforce ReferenceGrant on cross-namespace Consumer SecretRef @shreemaan-abhishek (#432)
• fix: redact credentials and AdminKey from controller logs @shreemaan-abhishek (#435)
• fix: allow webhook NetworkPolicy traffic on pod port 9443 @shreemaan-abhishek (#439)
• fix: cap condition message to Kubernetes 32768-byte limit @AlinsRan (#443)
• fix: trim whitespace in comma-separated annotation values @AlinsRan (#442)
• fix: honor BackendTrafficPolicy targetRefs.sectionName for Service ports @AlinsRan (#428)
• test(e2e): prewarm environment pool to hide per-spec deploy latency @AlinsRan (#426)
• feat: support downstream mTLS via Gateway API frontendValidation @AlinsRan (#424)
• test(e2e): remove fixed-sleep flakiness across e2e specs @AlinsRan (#427)
• feat: add L4RoutePolicy CRD for attaching stream plugins to Gateway API L4 routes @AlinsRan (#416)

👨🏽‍💻 Contributors

Thank you to our contributors for making this release possible:
@AlinsRan, @jarvis9443 and @shreemaan-abhishek