-
Notifications
You must be signed in to change notification settings - Fork 393
/
Copy pathv1.2.0.yaml
140 lines (135 loc) · 9.08 KB
/
v1.2.0.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
date: November 6, 2024
# Changes that are expected to cause an incompatibility with previous versions, such as deletions or modifications to existing APIs or updating default values.
breaking changes: |
Gateway API GRPCRoute and ReferenceGrant v1alpha2 have been removed
Please refer to the [Gateway API v1.2.0 documentation](https://github.com/kubernetes-sigs/gateway-api/releases) for more information
Removed default CPU limit of the Envoy Gateway deployment, to eliminate CPU throttling
Changed default Envoy shutdown settings: drain strategy has been changed to immediate, default minDrainDuration, drainTimeout and terminationGracePeriodSeconds have been set to 10s, 60s and 360s respectively
Set ignore_health_on_host_removal to true for clusters with static endpoints This was done to speed up removal of static endpoints by the control plane when active health check is configured
Xds and Infra IR logs are logged at Debug level instead of Info level. They will now not be seen by default in Envoy Gateway logs. You can change the logging level to default: debug to view them
# New features or capabilities added in this release.
new features: |
Added support for Gateway-API v1.2.0
Added support for IPv4/IPv6 Dual Stack for EnvoyProxy fleet and BackendRef resources
Added experimental support for EG standalone(host deployment) mode
Added support for JWT claims based Authorization in SecurityPolicy CRD
Added support for Response Override in BackendTrafficPolicy CRD
Added support for RequestTimeout in BackendTrafficPolicy CRD
Added support for inverting header matches for Rate Limit in BackendTrafficPolicy CRD
Added support for client TLS session resumption in ClientTrafficPolicy CRD
Added support for HTTPRouteFilter and path regex rewrite
Added support for host header rewrite in HTTPRouteFilter CRD
Added support for Listener Access Log in EnvoyProxy CRD
Added support for Datadog tracing support in EnvoyProxy CRD
Added support for request response sizes stats in EnvoyProxy CRD
Added support for modifying container SecurityContext for Envoy Gateway deployment in Helm
Added support for wildcard matching for CORS AllowMethods and AllowHeaders settings in SecurityPolicy CRD
Added support for match conditions for access log in EnvoyProxy CRD
Added support for using BackendCluster to represent OIDCProvider
Added support for RecomputeRoute for ExtAuth in SecurityPolicy CRD
Added support for sharing token cookies between multiple domains in SecurityPolicy CRD
Added support for JSONPatches for proxy bootstrap modifications in EnvoyProxy CRD
Added support for Active Passive Failover Backends
Added support for configuring the GRPC Health Checker in the BackendTrafficPolicy CRD
Added support for early request header mutation in the ClientTrafficPolicy CRD
Added support for JsonPath in the EnvoyPatchPolicy CRD
Added support for cluster settings for tracing and access log backends in EnvoyProxy CRD
Added support for cluster settings for non xRoute-generated backend refs
Added support for socket buffer limit field in ClientTrafficPolicy and BackendTrafficPolicy CRD
Added support for http2 upstream settings in BackendTrafficPolicy CRD
Added support for DNS resolution settings in BackendTrafficPolicy CRD
Added support for configuring service annotations in the Envoy Gateway helm chart
Added support for configuring priorityClassName to Envoy Gateway helm chart
Added support for ratelimit metrics monitoring in grafana in the addons helm chart
Added support for default user group and user id for the SecurityContexts in the Envoy Gateway helm chart
Added support for maxUnavailable in the PodDisruptionBudget in the Envoy Gateway helm chart
Added support for configuring NodeSelector in the Envoy Gateway helm chart
Added support for nonce in the OIDC auth flow
Added support for choosing an HTTPRoute's non-wildcard hostname as the default Host
Added support for returning 500 when EnvoyExtensionTrafficPolicy translation fails
Added support for returning 500 when SecurityPolicy translation fails
Added support for multiple backendRefs for ExtAuth and ExtProc
Added support for session persistence in HTTPRoute rules
Added support for the Backend resource for ExtAuth
Added support for target selectors on Envoy Gateway Extension Server policies
Added support for non-Kubernetes Backends for TLSRoute
Added support for fallback to the Backend API
Added support for reloadable EnvoyGateway configuration
Added support for adding Labels to the Envoy Service
Added support for custom name for ratelimit deployment
Added default SecurityContext for EG components
Added startupProbe to all provisioned containers
Added support for local validations for egctl translate and file provider
Added support for egctl x collect to collect information from the cluster for debugging
Added support for a native prometheus metrics endpoint in the ratelimit server
# Fixes for bugs identified in previous versions.
bug fixes: |
Fixed xDS translation failing when the WASM HTTP code source was configured without an SHA
Fixed unsupported listener protocol types causing errors while updating Gateway status
Fixed unsupported listener protocol types causing errors while updating Gateway status
Fixed invalid sectionName in BackendTLSPolicy for Backend
Fixed Delay in SecurityPolicy change propagation for HTTPRoute when using targetSelectors
Fixed JSONPath not being correctly translated to JSONPatch paths
Fixed allowing an empty slowStart value when using LeastRequest
Fixed updating the HTTPRoute status correctly when the linked Backend resource is invalid
Fixed timeout settings originating from the route being lost when translating the backend traffic policy
Fixed Backend resources not receiving status updates
Fixed active health checks requiring the expectedStatuses field to function correctly
Fixed HTTPHeaderFilter processing not correctly supporting multiple header values
Fixed reconciling multiple ReferenceGrants within the same namespace
Fixed unwanted / appearing in the Path when using Prefix Rewrites
Fixed incorrect gateway being selected as the HTTPRoute parent
Fixed override issues for EnvoyExtensionPolicy
Fixed nil pointer error when translating hash load balancing
Fixed nil pointer if backedtls.minVersion is set but backedtls.maxVersion is not
Fixed empty connection limits causing xDS rejection
Fixed rate limiting not working with both headers and CIDR matches
Fixed EDS not updating when deployments were created after services
Fixed RBAC issue for deleting infrastructure resources
Fixed gateways never reaching ready/programmed status when running Envoy as a Daemonset
Fixed rate limit deployment ignoring pod labels and annotation merges
Fixed the API Server receives unnecessary requests
Fixed egctl experimental translate using an incorrect namespace
Fixed reconciliation not being triggered for Secret updates referenced by a BackendTLSPolicy
Fixed xDS translation failure when WASM HTTP code source was configured without an SHA
Fixed HTTPRoute status displaying only one parent when targeting multiple gateways from different GatewayClasses
Fixed Route with multiple parents having an incorrect namespace in the parentRef status
Fixed BackendTlsPolicy specifying multiple targetRefs for the same service, to work
# Enhancements that improve performance.
performance improvements: |
Optimize memory usage by only storing distinct resources
# Other notable changes not covered by the above sections.
Other changes: |
Upgraded Envoy Proxy to v1.32.1
Reduced the amount of configuration logging, and make it line-delimited friendly
Made watching alpha CRDs optional, so that Envoy Gateway can run with older Gateway Api versions
Removed grafana test framework from the addons helm chart
Disabled ALPN for non-HTTP routes
Added statPrefix for HCM and TCPProxy
Enabled GatewayHTTPListenerIsolation conformance test
Enabled GRPC conformance profile
Enabled HTTPRouteBackendRequestHeaderModifier conformance test
Added e2e test for Daemonset mode
Fixed OVS scanner wrong license warnings
Added e2e test for Gateway with EnvoyProxy
Added e2e test for TLS session resumption
Added heap profile into benchmark report
Added e2e test for RecomputeRoute in ExtAuth
Added benchmark memory profiles into report
Fixed flaky gateway_with_conflicted_listener_cannot_be_merged e2e test
Fixed flaky Zipkin Tracing e2e test
Added e2e test for cookie based consistent hash load balancing
Added e2e test for load balancing
Fixed flaky authorization tests
Enabled upgrade test
Fixed flaky basic auth e2e test
Enabled use-client-protocol e2e test
Added performance benchmarking test for 1000 HTTPRoutes
Added e2e test for Datadog tracing
Added e2e tests for ratelimit invert matching headers
Reduced readinessProbe failureThreshold and periodSeconds
Bumped go-control-plane to v0.13.1
Enabled e2e tests for dual stack
Use grafana alloy instead of fluent-bit for e2e tests
Push tags without the v prefix for helm charts to support Flux HelmReleases
Use a stable label selector when creating Envoy Proxy fleet pods