v1.17.0-beta15

Fixes

• Fix glooctl asset builds to crossbuild with the appropriate architecture.

skipCI-kube-tests:true skipCI-docs-build:true (#9295)

v1.17.0-beta14

This release build failed.

Dependency Bumps

• solo-io/envoy-gloo has been upgraded to v1.29.2-patch2.

Breaking Changes

• • External Processing servers which mutate the body must also send a header mutation to correctly set the Content-Length. * Removing a query parameter in the ExtAuth filter no longer causes repeats of that query parameter to be removed. * JWT Authentication now validates the entire extracted token instead of only validating up to the first non-base64 character. * TE HTTP header from downstream is sanitized before proxying the request to upstream. * Host header is ignored if :authority header is included in HTTP/2 request, to bring Envoy into compliance with https://www.rfc-editor.org/rfc/rfc9113#section-8.3.1. (#9232)
• Set the service_name field used to create the the Envoy OpenTelemetryConfig to the name of the Gateway under which the Gloo OpenTelemetryConfig is defined.
  Breaking changes: * The previous behavior, which was to set the service_name field to an empty string resulting in display name unknown_service:envoy, is no longer available. * The ToEnvoyOpenTelemetryonfiguration function in "github.com/solo-io/gloo/projects/gloo/pkg/api/v1/options/tracing" has been removed and replaced with ToEnvoyOpenTelemetryConfiguration, and the signature has been updated to: ToEnvoyOpenTelemetryConfiguration(clusterName, serviceName string) *envoytrace.OpenTelemetryConfig (#7791)

New Features

• Expose the dynamic_stats option on the Envoy router. This flag is only intended to be used for benchmarking purposes - it is NOT RECOMMENDED to set this in production.
  For more information, see https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/http/router/v3/router.proto (#9260)
• Add ability to use %METADATA()% command directives in envoy access log format config. These will eventually replace %DYNAMIC_METADATA()%, %UPSTREAM_METADATA()%, and %CLUSTER_METADATA()% as well as adding support for ROUTE and LISTENER.
  A Gloo user can now access metadata added in the route options via envoyMetadata through this formatter. (#9246)

Fixes

• Fixes and improvements to glooctl version command:
• glooctl version previously had a bug displaying the tag when a digest image is used. It would show "latest" instead of showing the actual version.
• Both yaml and json options have been fixed to pretty the output. Previously both options did not format the display.
• This improvement also now includes kubernetes server version information. (#9211)

v1.16.9

Fixes

• Move resource cleanup job to pre-delete Helm hook. This fixes an issue where Helm uninstall would not complete when the validation webhook's failure policy was set to "Fail". (solo-io/solo-projects#5903)

v1.17.0-beta13

Dependency Bumps

• envoy-gloo/solo-io has been upgraded to 1.27.3-patch2.

Helm Changes

• Adds a new helm variable global.image.variant to specify the variant of the image to be deployed. Can take the values 'standard', 'fips', 'distroless', 'fips-distroless'. Defaults to 'standard'. (The 'fips' and 'fips-distroless' variants are an Enterprise-only feature). This consequently deprecates the global.image.fips value. Use global.image.variant=fips instead. (#8849)

New Features

• Added support for settings.gloo.istioOptions.enableAutoMtls to implement auto mTLS via Envoy transport_socket_match. (solo-io/solo-projects#5695)
• Add support for distroless images. (#8849)

Fixes

• Move resource cleanup job to pre-delete Helm hook. This fixes an issue where Helm uninstall would not complete when the validation webhook's failure policy was set to "Fail". (solo-io/solo-projects#5903)

v1.15.24

Dependency Bumps

• envoy-gloo/solo-io has been upgraded to 1.26.7-patch2.

v1.16.8

Dependency Bumps

• envoy-gloo/solo-io has been upgraded to 1.27.3-patch2.

v1.17.0-beta12

Breaking Changes

• glooctl get proxy will not work if you have persisted Proxy CRs in etcD and you are querying and older server version (1.16 and below). In general, we recommend that you keep your client and server versions in sync. You can verify the client/server versions you are currently running by calling glooctl version. (solo-io/solo-projects#5874)

v1.16.7

Fixes

• Expose use_hostname_for_hashing, the hostname will be used for hashing when using maglev for example, useful when using multiple host in the upstreams that resolve to the same IP. (#9138)

v1.17.0-beta11

Dependency Bumps

• helm.sh/helm has been upgraded to v3.14.2.

v1.16.6

Dependency Bumps

• helm.sh/helm has been upgraded to v3.14.2.