Skip to content

v0.23.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 11 Sep 19:21
· 10 commits to main since this release
v0.23.0
d84ed50
This commit was signed with the committer’s verified signature.
dilyevsky
GPG key ID: 8F8CCD40FC769EF5
Verified
Learn about vigilant mode.

This release introduces metrics collection, Envoy version selection, and improved tunnel reliability with numerous stability fixes across the platform.

Features

  • Metrics API and collection: Add metrics.apoxy.dev/v1alpha1 API with OTLP stats sink, snapshot decoration, revision attribution, and telemetry relay (c3fca55, 1658668, d1cb4e2, 0689ca4, 0d5ad60)
  • Configurable Envoy version: Pin Envoy v1.35.13 and add Proxy spec.envoy field to select data-plane Envoy release with SHA256 verification (d84ed50, 12fd29e)
  • Direct HTTPRoute to VPCService: Support direct HTTPRoute backendRefs to VPCService (5d83cd2)
  • Dynamic-only Backends: Accept Backend objects that only set dynamicProxy (7acbd62)
  • Console subresource support: Add GVRClient.subresource for connect subresources (9bc9514)
  • Session observer: Add tunnel session observer and gateway xDS patch/retranslate seams (08a8d51)

Bug Fixes

  • Proxy deletion: Unstick Proxy deletion after apiserver restart (49ac252)
  • SNAT address race: Fix SNAT address race and keep bound source addresses (8f0d3ca)
  • Gateway nil map panic: Fix nil map panic in PostTranslate hook (00a80bc)
  • Network namespace recovery: Recreate named netns whose bind mount died with the node (fed7dda)
  • Relay connection cleanup: Make relay connection cleanup durable and recover relay registration after API restore (4f48641, 227a50c)

Improvements

  • Tunnel reliability: Separate keep-alive counters, cap metrics push size, release slots before Tunnel pass, and isolate agent admin endpoints (443f680, d7de291, ae8d0d4)
  • Tunnel buffer optimization: Cap underlay receive buffers at 9216 instead of UDP max (a58905f)
  • Metadata generation tracking: Track metadata.generation for kinds the gateway reconciler watches (65e9a0a)
  • API content negotiation: Advertise only JSON and YAML in content negotiation (d54cc03)
  • Gateway tenant attribution: Carry tenant attribution on translated xDS clusters (18786b5)
  • CLI YAML parsing: Skip comment-only YAML documents in apply/delete/deploy (18786b5)
  • Isolated resource storage: Support isolated resource storage in apiserver (4432875)
  • Service readiness reporting: Report unobserved service readiness (0e8788d)
  • Console multiplexing: Multiplex Kubernetes watches (9153270)
  • Console browser fixes: Miller browser clrk parity fixes (4c53dfb)
  • Remove deprecated runtime guard: Drop removed Envoy runtime guard use_eds_cache_for_ads (55cbfe3)

Infrastructure

  • CI migration: Migrate OSS workflows to Blacksmith and remove Depot sccache dependency (652a431, bb1d6e6)
  • Helm improvements: Register every served API group and add apiserver startup probe (8703219)
  • Standalone deployment: Root standalone state beside source (adc3f58)
Assets 13
Loading