Skip to content

Ambassador 1.12.0

Compare
Choose a tag to compare
@kflynn kflynn released this 08 Mar 17:29
· 3753 commits to master since this release

馃帀 Ambassador 1.12.0 馃帀

Ambassador is an open source, Kubernetes-native microservices API gateway built on the Envoy Proxy.

Upgrade Ambassador - https://www.getambassador.io/reference/upgrading.html
View changelog - https://github.com/datawire/ambassador/blob/master/CHANGELOG.md
Get started with Ambassador on Kubernetes - https://www.getambassador.io/user-guide/getting-started

Ambasssador API Gateway + Ambassador Edge Stack

  • Feature: Endpoint routing is now much more performant, especially in situations where reconfigurations are frequent.
  • Feature: A scrubbed ambassador snapshot is now accessible outside the pod at :8005/snapshot-external. This port is exposed on the ambassador-admin Kubernetes service.
  • Feature: Ambassador now supports configuring the maximum lifetime of an upstream connection using cluster_max_connection_lifetime_ms. After the configured time, upstream connections are drained and closed, allowing an operator to set an upper bound on how long any upstream connection will remain open. This is useful when using Kubernetes Service resolvers (the default) and modifying label selectors for traffic shifting.
  • Feature: The Ambassador Module configuration now supports cluster_request_timeout_ms to set a default request timeout_ms for Mappings. This allows an operator to update the default request timeout (currently 3000ms) without needing to update every Mapping.
  • Feature: The Ambassador Module configuration now supports suppress_envoy_headers to prevent Ambassador from setting additional headers on requests and responses. These headers are typically used for diagnostic purposes and are safe to omit when they are not desired.
  • Feature: All Kubernetes services managed by Ambassador are automatically instrumented with service catalog discovery annotations.
  • Feature: headers_with_underscores_action is now configurable in the Ambassador Module.
  • Feature: The Ambassador Module configuration now supports strip_matching_host_port to control whether the port should be removed from the host/Authority header before any processing by request filters / routing. This behavior only applies if the port matches the associated Envoy listener port.
  • Bugfix: Ambassador now does a better job of cleaning up gRPC connections when shutting down.
  • Bugfix: Prevent potential reconcile loop when updating the status of an Ingress.
  • Bugfix: Update Python requirements, including addressing CVE-2020-36242 (#3233)
  • Bugfix: Remove unnecessary logs about Kubernetes Secrets (#3229)

Ambassador Edge Stack only

  • Feature: Added support for ambassador-agent deployment, reporting to Ambassador Cloud Service Catalog (https://app.getambassador.io)
  • Feature: edgectl login will automatically open your browser, allowing you to login into Service Catalog (https://app.getambassador.io)
  • Feature: edgectl install command allows you to install a new Ambassador Edge Stack automatically connected to Ambassador Cloud by passing a --cloud-connect-token argument.
  • Feature: AES_AUTH_TIMEOUT now allows you to configure the timeout of the AES authentication service. Defaults to 4s.
  • Bugfix: Prevent Dev Portal from sporadically responding with upstream connect timeout when loading content