latest

This is the "latest" release of Envoy Gateway, which contains the most recent commits from the main branch.

This release might not be stable.

It is only intended for developers wishing to try out the latest features in Envoy Gateway, some of which may not be fully implemented.

We use v0.0.0-latest as the latest chart version to install latest envoy-gateway:

helm install eg oci://docker.io/envoyproxy/gateway-helm --version v0.0.0-latest -n envoy-gateway-system --create-namespace

Try latest version of egctl with:

curl -Ls https://gateway.envoyproxy.io/get-egctl.sh | VERSION=latest bash

v1.1.2

What's Changed

• [release/v1.1] Cherry-Pick #4279, #4296, #4230 by @guydc in #4315
• [release/v1.1] Bump EnvoyProxy to v1.32.2 by @arkodg in #4294
• [release/v1.1] Release v1.1.2 by @guydc in #4323

Full Changelog: v1.1.1...v1.1.2

v1.1.1

Release Announcement

Check out the v1.1.1 release notes to learn more about the release.

What's Changed

• [release/v1.1] fix: change the wasm download URL to point to the envoy examples repo… by @arkodg in #4151
• [release/v1.1] Pin ratelimit image to 26f28d78 by @arkodg in #4088
• [release/v1.1] Cherry-pick commits for v1.1.1 by @arkodg in #4173
• [release-1.1] fix: allow empty slowStart when using LeastRequest by @zirain in #4211
• [release/v1.1] fix: reject invalid backends in route validation (#4209) by @guydc in #4212
• [release/v1.1] cherry pick #4219 by @guydc in #4220
• [release/v1.1] release: v1.1.1 by @guydc in #4221

Full Changelog: v1.1.0...v1.1.1

v1.1.0

Release Announcement

Check out the v1.1 release announcement to learn more about the release.

What's Changed

• ci: update cherry-pick v1.0.0 by @Xunzhuo in #2784
• fix: add missing release notes details and re organize it by @Xunzhuo in #2785
• e2e: backend upgrade test by @guydc in #2725
• chore: add testdata to passive health checks by @deszhou in #2788
• promote: guydc as maintainer by @Xunzhuo in #2794
• fix: Delete unused status keys from watchable by @uniglot in #2782
• docs: fix commands in basic auth example by @arkodg in #2791
• feat: Support WellKnownSystemCerts in BackendTLSPolicy by @liorokman in #2804
• docs: refactor user guides by @Xunzhuo in #2797
• Fix gen check by @Xunzhuo in #2814
• refactor: set instead of map for mergeGateways by @deszhou in #2803
• remove: support for hostnetwork by @Xunzhuo in #2815
• feat(egctl): add support for egctl to translate from gateway-api resources to IR by @liorokman in #2799
• docs: basic auth example use https by @phantooom in #2806
• chore: group go.opentelemetry.io dependabot by @zirain in #2821
• Add referenced BackendRefs for ExtAuth to Resource Tree by @zhaohuabing in #2795
• fix bootstrap merge by @zirain in #2801
• fix: skip the ReasonTargetNotFound for all policies by @shawnh2 in #2802
• docs: update EnvoyProxy logs by @zirain in #2822
• fix: omit default replicas on Kubernetes Deployment by @ardikabs in #2816
• bug: compute endpointType for all protocol types by @arkodg in #2833
• docs: Routing outside k8s by @arkodg in #2831
• build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 by @dependabot in #2825
• build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 by @dependabot in #2826
• build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #2827
• Fix: failed to create envoy-oidc-hmac secret when upgrading EG by @zhaohuabing in #2835
• build(deps): bump google.golang.org/grpc from 1.62.0 to 1.62.1 by @dependabot in #2829
• Ext auth e2e tests by @zhaohuabing in #2830
• fix existing secret check by @zirain in #2838
• ci: update k8s matrix by @zirain in #2836
• e2e: try to fix client timeout flakes by @zirain in #2812
• feat: Support Upstream TLS to multiple Backends by @liorokman in #2818
• e2e: move drain settings into shutdown settings by @arkodg in #2850
• docs: mtls to the gateway by @arkodg in #2851
• ignore finalizers when comparing envoy proxy svc by @arkodg in #2856
• Chore: remove the uncessary allAssociatedRefGrants from resourceMappings by @zhaohuabing in #2843
• docs: allow users to configure custom certs for control plane auth by @zirain in #2847
• add e2e tests for ext auth with grpc auth service by @zhaohuabing in #2841
• fix: Address race condition disrupting graceful shutdown process by @davidalger in #2864
• docs: move Design docs under "Get Involved" by @arkodg in #2857
• e2e: backend TLS policy by @guydc in #2853
• Update the user doc for OIDC by @zhaohuabing in #2778
• add ADOPTERS.md by @zhaohuabing in #2865
• build(deps): bump softprops/action-gh-release from 1 to 2 by @dependabot in #2867
• build(deps): bump github.com/bufbuild/buf from 1.29.0 to 1.30.0 in /tools/src/buf by @dependabot in #2870
• build(deps): bump github.com/prometheus/common from 0.49.0 to 0.50.0 by @dependabot in #2871
• build(deps): bump fortio.org/fortio from 1.63.3 to 1.63.4 by @dependabot in #2873
• Add tetrate to adopters by @zhaohuabing in #2874
• fix: Don't override the ALPN array if HTTP/3 is enabled. by @liorokman in #2876
• [e2e] eg release upgrade test by @alexwo in #2862
• Docs for ext auth by @zhaohuabing in #2868
• Remove the uncessary \ by @zhaohuabing in #2883
• docs: backend tls policy by @guydc in #2884
• feat: add PolicyStatus for BackendTrafficPolicy by @shawnh2 in #2846
• Change the Merge behavior to Replace for SecurityPolicy by @zhaohuabing in #2885
• e2e: add weighted backend by @ShyunnY in #2863
• http3: use service port in alt-svc header by @arkodg in #2886
• bug: add h3 alpn by default if http3 is enabled by @arkodg in #2887
• fix: prevent policies targeting non-TLS listeners on the same port from conflicting by @liorokman in #2786
• chore: remove ProcessBackendTLSPoliciesAncestorRef by @zhaohuabing in #2845
• Change the Merge behavior to Replace for BackendTrafficPolicy by @zhaohuabing in #2888
• shutdown drainTimeout should also affect envoy drain time by @arkodg in #2898
• skip publishing empty status for policies by @arkodg in #2902
• docs: multiple gatewayclass and merge gateways deployment mode by @cnvergence in #2881
• feat: add PolicyStatus for ClientTrafficPolicy by @shawnh2 in #2895
• Use gwapiv1a2.PolicyStatus for SecurityPolicy Status by @zhaohuabing in #2848
• Fix oidc doc by @zhaohuabing in #2905
• Release v1.0 by @Xunzhuo in #2909
• fix: deployment-mode doc markdown links by @cnvergence in #2912
• fix: QUIC listeners should only advertise HTTP/3 over ALPN, and not HTTP/2 and HTTP/1.1 by @liorokman in #2907
• e2e: graceful envoy shutdown by @guydc in #2839
• feat: add PolicyStatus for EnvoyPatchPolicy by @shawnh2 in #2910
• chore: improve docs-serve by @zirain in #2920
• api: increase rate-limit global rules limit by @ShyunnY in #2906
• docs: add Envoy Gateway threat model by @edurra in #2915
• Remove duplicated http filters for ExtAuth by @zhaohuabing in #2893
• feat: expose prom port in rl svc by @ShyunnY in #2914
• blog post for v1.0 by @arkodg in #2923
• rm extra "that" from blog by @arkodg in #2928
• docs: %s/Application/API/g by @arkodg in #2929
• Pin version to v1.0.0 in 1.0.0 docs by @zhaohuabing in #2933
• Run certgen when upgrading by @zhaohuabing in #2934
• chore: use v1.0.0 as default for upgrade test by @guydc in #2938
• api: connection limits by @guydc in #2709
• docs: fix name spelling in threat model by @mrcdb in #2936
• api: support failOpen in ext auth by @deszhou in #2908
• API: EnvoyExtensionPolicy by @guydc in #2570
• chore: add helm template test by @zirain in #2935
• fix: install-egctl doc dead link by @deszhou in #2916
• chore: fix helm-template by @zirain in #2943
• e2e: use default shut...

v1.1.0-rc.1

What's Changed

• ci: update cherry-pick v1.0.0 by @Xunzhuo in #2784
• fix: add missing release notes details and re organize it by @Xunzhuo in #2785
• e2e: backend upgrade test by @guydc in #2725
• chore: add testdata to passive health checks by @deszhou in #2788
• promote: guydc as maintainer by @Xunzhuo in #2794
• fix: Delete unused status keys from watchable by @uniglot in #2782
• docs: fix commands in basic auth example by @arkodg in #2791
• feat: Support WellKnownSystemCerts in BackendTLSPolicy by @liorokman in #2804
• docs: refactor user guides by @Xunzhuo in #2797
• Fix gen check by @Xunzhuo in #2814
• refactor: set instead of map for mergeGateways by @deszhou in #2803
• remove: support for hostnetwork by @Xunzhuo in #2815
• feat(egctl): add support for egctl to translate from gateway-api resources to IR by @liorokman in #2799
• docs: basic auth example use https by @phantooom in #2806
• chore: group go.opentelemetry.io dependabot by @zirain in #2821
• Add referenced BackendRefs for ExtAuth to Resource Tree by @zhaohuabing in #2795
• fix bootstrap merge by @zirain in #2801
• fix: skip the ReasonTargetNotFound for all policies by @shawnh2 in #2802
• docs: update EnvoyProxy logs by @zirain in #2822
• fix: omit default replicas on Kubernetes Deployment by @ardikabs in #2816
• bug: compute endpointType for all protocol types by @arkodg in #2833
• docs: Routing outside k8s by @arkodg in #2831
• build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 by @dependabot in #2825
• build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 by @dependabot in #2826
• build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #2827
• Fix: failed to create envoy-oidc-hmac secret when upgrading EG by @zhaohuabing in #2835
• build(deps): bump google.golang.org/grpc from 1.62.0 to 1.62.1 by @dependabot in #2829
• Ext auth e2e tests by @zhaohuabing in #2830
• fix existing secret check by @zirain in #2838
• ci: update k8s matrix by @zirain in #2836
• e2e: try to fix client timeout flakes by @zirain in #2812
• feat: Support Upstream TLS to multiple Backends by @liorokman in #2818
• e2e: move drain settings into shutdown settings by @arkodg in #2850
• docs: mtls to the gateway by @arkodg in #2851
• ignore finalizers when comparing envoy proxy svc by @arkodg in #2856
• Chore: remove the uncessary allAssociatedRefGrants from resourceMappings by @zhaohuabing in #2843
• docs: allow users to configure custom certs for control plane auth by @zirain in #2847
• add e2e tests for ext auth with grpc auth service by @zhaohuabing in #2841
• fix: Address race condition disrupting graceful shutdown process by @davidalger in #2864
• docs: move Design docs under "Get Involved" by @arkodg in #2857
• e2e: backend TLS policy by @guydc in #2853
• Update the user doc for OIDC by @zhaohuabing in #2778
• add ADOPTERS.md by @zhaohuabing in #2865
• build(deps): bump softprops/action-gh-release from 1 to 2 by @dependabot in #2867
• build(deps): bump github.com/bufbuild/buf from 1.29.0 to 1.30.0 in /tools/src/buf by @dependabot in #2870
• build(deps): bump github.com/prometheus/common from 0.49.0 to 0.50.0 by @dependabot in #2871
• build(deps): bump fortio.org/fortio from 1.63.3 to 1.63.4 by @dependabot in #2873
• Add tetrate to adopters by @zhaohuabing in #2874
• fix: Don't override the ALPN array if HTTP/3 is enabled. by @liorokman in #2876
• [e2e] eg release upgrade test by @alexwo in #2862
• Docs for ext auth by @zhaohuabing in #2868
• Remove the uncessary \ by @zhaohuabing in #2883
• docs: backend tls policy by @guydc in #2884
• feat: add PolicyStatus for BackendTrafficPolicy by @shawnh2 in #2846
• Change the Merge behavior to Replace for SecurityPolicy by @zhaohuabing in #2885
• e2e: add weighted backend by @ShyunnY in #2863
• http3: use service port in alt-svc header by @arkodg in #2886
• bug: add h3 alpn by default if http3 is enabled by @arkodg in #2887
• fix: prevent policies targeting non-TLS listeners on the same port from conflicting by @liorokman in #2786
• chore: remove ProcessBackendTLSPoliciesAncestorRef by @zhaohuabing in #2845
• Change the Merge behavior to Replace for BackendTrafficPolicy by @zhaohuabing in #2888
• shutdown drainTimeout should also affect envoy drain time by @arkodg in #2898
• skip publishing empty status for policies by @arkodg in #2902
• docs: multiple gatewayclass and merge gateways deployment mode by @cnvergence in #2881
• feat: add PolicyStatus for ClientTrafficPolicy by @shawnh2 in #2895
• Use gwapiv1a2.PolicyStatus for SecurityPolicy Status by @zhaohuabing in #2848
• Fix oidc doc by @zhaohuabing in #2905
• Release v1.0 by @Xunzhuo in #2909
• fix: deployment-mode doc markdown links by @cnvergence in #2912
• fix: QUIC listeners should only advertise HTTP/3 over ALPN, and not HTTP/2 and HTTP/1.1 by @liorokman in #2907
• e2e: graceful envoy shutdown by @guydc in #2839
• feat: add PolicyStatus for EnvoyPatchPolicy by @shawnh2 in #2910
• chore: improve docs-serve by @zirain in #2920
• api: increase rate-limit global rules limit by @ShyunnY in #2906
• docs: add Envoy Gateway threat model by @edurra in #2915
• Remove duplicated http filters for ExtAuth by @zhaohuabing in #2893
• feat: expose prom port in rl svc by @ShyunnY in #2914
• blog post for v1.0 by @arkodg in #2923
• rm extra "that" from blog by @arkodg in #2928
• docs: %s/Application/API/g by @arkodg in #2929
• Pin version to v1.0.0 in 1.0.0 docs by @zhaohuabing in #2933
• Run certgen when upgrading by @zhaohuabing in #2934
• chore: use v1.0.0 as default for upgrade test by @guydc in #2938
• api: connection limits by @guydc in #2709
• docs: fix name spelling in threat model by @mrcdb in #2936
• api: support failOpen in ext auth by @deszhou in #2908
• API: EnvoyExtensionPolicy by @guydc in #2570
• chore: add helm template test by @zirain in #2935
• fix: install-egctl doc dead link by @deszhou in #2916
• chore: fix helm-template by @zirain in #2943
• e2e: use default shutdown mgr settings in upgrade test suite by @guydc in #2946
• refactor: collapse eg-metrics-svc into eg-svc by @...

v1.0.2

Date: June 12, 2024

Installation

• Updated EnvoyProxy to 1.29.5
• Use Patch API for infra-client
• Use ServerSideApply instead of CreateOrUpdate for infra-client

Testing

• Fixed failures due to an expired certificate in one of the translator tests

Translator

• Use - for naming service and container ports
• Added proxy protocol always as first listenerFilter
• Set ignoreCase for header matchers in extAuth
• Added backend TLS SAN validation
• Fixed ReplaceFullPath not working for root path (/)

Providers

• Fixed duplicated xroutes are added to gatewayapi Resources
• Fixed security policy reference grant from field type
• Fixed Route extension filters with different types but the same name and namespace aren't correctly cached
• Fixed secrets/configmap updates to trigger a controller reconcile by removing the generationChanged predicate
• Removed namespace restriction for EnvoyProxy parametersRef

v1.0.1

Release Announcement

Check out the v1.0.1 release note to learn more about this patch release 🎉

v1.0.0

Release Announcement

Check out the v1.0 release announcement to learn more about the GA release 🎉

What's Changed

• Fix TestE2E/RateLimitBasedJwtClaims test by @zhaohuabing in #2097
• add a newer PR reference in rc release docs by @arkodg in #2101
• fix: panic when using nil xdsRouteAction by @Xunzhuo in #2104
• remove cors, jwt, rl assignment from route translator by @arkodg in #2105
• fix: use lowercases of eg admin config fields by @Xunzhuo in #2107
• fix: testGatewayClassWithParamRef e2e test flaky by @Xunzhuo in #2114
• build(deps): bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 by @dependabot in #2118
• build(deps): bump github.com/bufbuild/buf from 1.27.1 to 1.27.2 in /tools/src/buf by @dependabot in #2121
• build(deps): bump github.com/go-logr/logr from 1.2.4 to 1.3.0 by @dependabot in #2117
• build(deps): bump envoyproxy/toolshed from actions-v0.0.25 to 0.1.2 by @dependabot in #2116
• build(deps): bump actions/setup-node from 3 to 4 by @dependabot in #2115
• chore: add more EnvoyProxy cases by @zirain in #2120
• build(deps): bump github.com/golangci/golangci-lint from 1.55.0 to 1.55.1 in /tools/src/golangci-lint by @dependabot in #2119
• feat: CEL Validation in BackendTrafficPolicy by @slayer321 in #2110
• e2e: eg controlplane metrics by @zirain in #2106
• chore: fix http2_protocol_options warning message by @tmsnan in #2048
• fix Failed to update SecurityPolicy status by @zhaohuabing in #2128
• fix: add missing status equal for SecurityPolicy by @Xunzhuo in #2134
• fix jwt doc by @zhaohuabing in #2135
• Bump Gateway API to v1.0.0 by @arkodg in #2142
• Enable HTTPRouteRewritePath test by @arkodg in #2112
• helm: remove kube-rbac-proxy and update metrics service by @Xunzhuo in #2108
• doc: user doc for CORS by @zhaohuabing in #2137
• fix(ci): bump go version to 1.21 by @Xunzhuo in #2144
• conformance: Enable HTTPRouteBackendProtocolH2C conformance test by @zirain in #2136
• Fix attachedRoutes computation by @arkodg in #2085
• fix comments in loadbalancer api by @tmsnan in #2145
• fix(docs): incorrect quickstart links by @Xunzhuo in #2146
• fix: null pointer when CORS maxAge is not specified by @zhaohuabing in #2133
• Prep v0.6 release by @arkodg in #2152
• fix: matrix link in release note by @Xunzhuo in #2157
• docs: move announcements on top by @Xunzhuo in #2158
• chore: refactor string match by @zhaohuabing in #2102
• build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by @dependabot in #2161
• build(deps): bump github.com/go-logr/zapr from 1.2.4 to 1.3.0 by @dependabot in #2162
• docs: fix invalid title in cors by @shawnh2 in #2173
• test: add e2e test for CORS by @ardikabs in #2169
• docs: fix typo in bootstrap example by @akhenakh in #2171
• build(deps): bump github.com/golangci/golangci-lint from 1.55.1 to 1.55.2 in /tools/src/golangci-lint by @dependabot in #2164
• build(deps): bump envoyproxy/toolshed from actions-v0.1.2 to 0.1.15 by @dependabot in #2163
• opt: move gateway namespace mode to common helper by @Xunzhuo in #2129
• build(deps): bump github.com/bufbuild/buf from 1.27.2 to 1.28.0 in /tools/src/buf by @dependabot in #2184
• build(deps): bump yamllint from 1.32.0 to 1.33.0 in /tools/src/yamllint by @dependabot in #2183
• build(deps): bump envoyproxy/toolshed from actions-v0.1.15 to 0.1.39 by @dependabot in #2182
• build(deps): bump go.opentelemetry.io/otel/metric from 1.19.0 to 1.20.0 by @dependabot in #2181
• build(deps): bump go.opentelemetry.io/otel from 1.19.0 to 1.20.0 by @dependabot in #2179
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 0.42.0 to 0.43.0 by @dependabot in #2177
• build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.42.0 to 0.43.0 by @dependabot in #2180
• feat: add CEL validation for EnvoyProxy telemetry by @shawnh2 in #2050
• docs: http to https redirect user guide by @ionutvilie in #2167
• feat: OIDC Gateway API by @zhaohuabing in #2122
• Default ctrl plane cert expiry time to 5 years by @arkodg in #2175
• Fix weighted route by @zhaohuabing in #2187
• Add E2E Tests for UDPRoute by @cnvergence in #2140
• api: add proxyProtocol in BackendTrafficPolicy by @arkodg in #2189
• doc: small patch cert-manager doc better experience by @tanujd11 in #2197
• docs: update gatewayapi resources version and fix dead link by @shawnh2 in #2190
• api: tcpKeepAlive in BackendTrafficPolicy by @arkodg in #2194
• e2e: tests for TCPRoute by @slayer321 in #2109
• api: enableProxyProtocol in ClientTrafficPolicy by @arkodg in #2188
• OIDC xds translation by @zhaohuabing in #2191
• feat: basic auth API by @zhaohuabing in #2199
• fix: xds translation return early, should be done in a best-effort manner by @zhaohuabing in #2202
• chore: update egctl install cmd by @Xunzhuo in #2218
• build(deps): bump the k8s-io group with 3 updates by @dependabot in #2212
• build(deps): bump github.com/bufbuild/buf from 1.28.0 to 1.28.1 in /tools/src/buf by @dependabot in #2217
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 0.42.0 to 0.44.0 by @dependabot in #2216
• build(deps): bump envoyproxy/toolshed from actions-v0.1.39 to 0.1.54 by @dependabot in #2211
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 0.43.0 to 0.44.0 by @dependabot in #2214
• build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.43.0 to 0.44.0 by @dependabot in #2213
• feat: proxy protocol in ClientTrafficPolicy by @arkodg in #2203
• fix: trim hyphen suffix in resource name by @cnvergence in #2222
• refactor: simplify filter patching with an unified interface by @zhaohuabing in #2210
• feat: add support to extract from different identifier on JWT by @ardikabs in #2206
• feat: proxyProtocol in BackendTrafficPolicy by @arkodg in #2192
• feat:support slow start mode by @tmsnan in #2219
• docs: fix broken format on JWT by @ardikabs in #2240
• docs: update version matrix by @Xunzhuo in #2237
• build(deps): bump github.com/miekg/dns from 1.1.46 to 1.1.57 by @dependabot in #2243
• build(deps): bump envoyproxy/toolshed from actions-v0.1.54 to 0.1.65 by @dependabot in #2242
• chore: add helm lint by @misstick86 in #2174
• feat: basic auth impl by @zhaohuabing in #2224
• update k8s version in compatibility matrix by @arkodg in #2245
• user docs for basic auth by @zhaohuabing in https://github.com/envoyproxy/gate...

v1.0.0-rc.1

What's Changed

• Fix TestE2E/RateLimitBasedJwtClaims test by @zhaohuabing in #2097
• add a newer PR reference in rc release docs by @arkodg in #2101
• fix: panic when using nil xdsRouteAction by @Xunzhuo in #2104
• remove cors, jwt, rl assignment from route translator by @arkodg in #2105
• fix: use lowercases of eg admin config fields by @Xunzhuo in #2107
• fix: testGatewayClassWithParamRef e2e test flaky by @Xunzhuo in #2114
• build(deps): bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 by @dependabot in #2118
• build(deps): bump github.com/bufbuild/buf from 1.27.1 to 1.27.2 in /tools/src/buf by @dependabot in #2121
• build(deps): bump github.com/go-logr/logr from 1.2.4 to 1.3.0 by @dependabot in #2117
• build(deps): bump envoyproxy/toolshed from actions-v0.0.25 to 0.1.2 by @dependabot in #2116
• build(deps): bump actions/setup-node from 3 to 4 by @dependabot in #2115
• chore: add more EnvoyProxy cases by @zirain in #2120
• build(deps): bump github.com/golangci/golangci-lint from 1.55.0 to 1.55.1 in /tools/src/golangci-lint by @dependabot in #2119
• feat: CEL Validation in BackendTrafficPolicy by @slayer321 in #2110
• e2e: eg controlplane metrics by @zirain in #2106
• chore: fix http2_protocol_options warning message by @tmsnan in #2048
• fix Failed to update SecurityPolicy status by @zhaohuabing in #2128
• fix: add missing status equal for SecurityPolicy by @Xunzhuo in #2134
• fix jwt doc by @zhaohuabing in #2135
• Bump Gateway API to v1.0.0 by @arkodg in #2142
• Enable HTTPRouteRewritePath test by @arkodg in #2112
• helm: remove kube-rbac-proxy and update metrics service by @Xunzhuo in #2108
• doc: user doc for CORS by @zhaohuabing in #2137
• fix(ci): bump go version to 1.21 by @Xunzhuo in #2144
• conformance: Enable HTTPRouteBackendProtocolH2C conformance test by @zirain in #2136
• Fix attachedRoutes computation by @arkodg in #2085
• fix comments in loadbalancer api by @tmsnan in #2145
• fix(docs): incorrect quickstart links by @Xunzhuo in #2146
• fix: null pointer when CORS maxAge is not specified by @zhaohuabing in #2133
• Prep v0.6 release by @arkodg in #2152
• fix: matrix link in release note by @Xunzhuo in #2157
• docs: move announcements on top by @Xunzhuo in #2158
• chore: refactor string match by @zhaohuabing in #2102
• build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by @dependabot in #2161
• build(deps): bump github.com/go-logr/zapr from 1.2.4 to 1.3.0 by @dependabot in #2162
• docs: fix invalid title in cors by @shawnh2 in #2173
• test: add e2e test for CORS by @ardikabs in #2169
• docs: fix typo in bootstrap example by @akhenakh in #2171
• build(deps): bump github.com/golangci/golangci-lint from 1.55.1 to 1.55.2 in /tools/src/golangci-lint by @dependabot in #2164
• build(deps): bump envoyproxy/toolshed from actions-v0.1.2 to 0.1.15 by @dependabot in #2163
• opt: move gateway namespace mode to common helper by @Xunzhuo in #2129
• build(deps): bump github.com/bufbuild/buf from 1.27.2 to 1.28.0 in /tools/src/buf by @dependabot in #2184
• build(deps): bump yamllint from 1.32.0 to 1.33.0 in /tools/src/yamllint by @dependabot in #2183
• build(deps): bump envoyproxy/toolshed from actions-v0.1.15 to 0.1.39 by @dependabot in #2182
• build(deps): bump go.opentelemetry.io/otel/metric from 1.19.0 to 1.20.0 by @dependabot in #2181
• build(deps): bump go.opentelemetry.io/otel from 1.19.0 to 1.20.0 by @dependabot in #2179
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 0.42.0 to 0.43.0 by @dependabot in #2177
• build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.42.0 to 0.43.0 by @dependabot in #2180
• feat: add CEL validation for EnvoyProxy telemetry by @shawnh2 in #2050
• docs: http to https redirect user guide by @ionutvilie in #2167
• feat: OIDC Gateway API by @zhaohuabing in #2122
• Default ctrl plane cert expiry time to 5 years by @arkodg in #2175
• Fix weighted route by @zhaohuabing in #2187
• Add E2E Tests for UDPRoute by @cnvergence in #2140
• api: add proxyProtocol in BackendTrafficPolicy by @arkodg in #2189
• doc: small patch cert-manager doc better experience by @tanujd11 in #2197
• docs: update gatewayapi resources version and fix dead link by @shawnh2 in #2190
• api: tcpKeepAlive in BackendTrafficPolicy by @arkodg in #2194
• e2e: tests for TCPRoute by @slayer321 in #2109
• api: enableProxyProtocol in ClientTrafficPolicy by @arkodg in #2188
• OIDC xds translation by @zhaohuabing in #2191
• feat: basic auth API by @zhaohuabing in #2199
• fix: xds translation return early, should be done in a best-effort manner by @zhaohuabing in #2202
• chore: update egctl install cmd by @Xunzhuo in #2218
• build(deps): bump the k8s-io group with 3 updates by @dependabot in #2212
• build(deps): bump github.com/bufbuild/buf from 1.28.0 to 1.28.1 in /tools/src/buf by @dependabot in #2217
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 0.42.0 to 0.44.0 by @dependabot in #2216
• build(deps): bump envoyproxy/toolshed from actions-v0.1.39 to 0.1.54 by @dependabot in #2211
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 0.43.0 to 0.44.0 by @dependabot in #2214
• build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.43.0 to 0.44.0 by @dependabot in #2213
• feat: proxy protocol in ClientTrafficPolicy by @arkodg in #2203
• fix: trim hyphen suffix in resource name by @cnvergence in #2222
• refactor: simplify filter patching with an unified interface by @zhaohuabing in #2210
• feat: add support to extract from different identifier on JWT by @ardikabs in #2206
• feat: proxyProtocol in BackendTrafficPolicy by @arkodg in #2192
• feat:support slow start mode by @tmsnan in #2219
• docs: fix broken format on JWT by @ardikabs in #2240
• docs: update version matrix by @Xunzhuo in #2237
• build(deps): bump github.com/miekg/dns from 1.1.46 to 1.1.57 by @dependabot in #2243
• build(deps): bump envoyproxy/toolshed from actions-v0.1.54 to 0.1.65 by @dependabot in #2242
• chore: add helm lint by @misstick86 in #2174
• feat: basic auth impl by @zhaohuabing in #2224
• update k8s version in compatibility matrix by @arkodg in #2245
• user docs for basic auth by @zhaohuabing in #2246
• chore: update otel collector chart version by @zirain in #2254
• fix flaky test by @zhaohuabing in...

v0.6.0

What's Changed

• update cherry-pick GHA for v0.5 by @arkodg in #1714
• refactor: set defaults in Deployment, else k8s sets them for you, creating infinite reconciliation loop by @qicz in #1594
• docs: update extending-envoy-gateway.md to match the API Reference by @rinswind in #1725
• feat: Set --cpuset-threads in EnvoyProxy cmdline arg by @arkodg in #1727
• build(deps): bump github.com/prometheus/common from 0.42.0 to 0.44.0 by @dependabot in #1732
• build(deps): bump google.golang.org/grpc from 1.56.2 to 1.57.0 by @dependabot in #1731
• build(deps): bump sphinx from 6.2.1 to 7.1.1 in /tools/src/sphinx-build by @dependabot in #1730
• observability: add container port for metrics by @zirain in #1736
• DeepCopy resources that require status updates by @arkodg in #1723
• test: add setvalue unit tests coverage by @Xunzhuo in #1735
• Add request mirroring doc by @AliceProxy in #1737
• docs: Add user docs for EnvoyPatchPolicy by @arkodg in #1733
• fix: egctl add support for translations using RateLimitFilter by @slayer321 in #1729
• e2e & misc fixes for EnvoyPatchPolicy by @arkodg in #1738
• docs: fix tracing doc and example by @zirain in #1741
• Release v0.5.0 docs by @arkodg in #1750
• Fix typo in docs url by @arkodg in #1751
• feat: support timeout and failOpen/failClose knobs for Global RateLimiting by @tmsnan in #1704
• Remove youngnick from maintainers by @youngnick in #1744
• docs: update v0.5 release details by @arkodg in #1756
• rm deprecated SourceIP field by @arkodg in #1757
• chore: Validate before adding Xds resource by @Ronnie-personal in #1662
• feat: support AuthenticationFilter in GRPCRoute by @cnvergence in #1720
• helm: apply Role and RoleBinding for envoy gateway in namespaced mode by @shawnh2 in #1656
• feat(proxy): introduce Concurrency under EnvoyProxy resource by @ardikabs in #1719
• feat: add ratelimitfilter support for grpcroute by @shawnh2 in #1762
• Update codecov patch coverage threshold to 60% by @arkodg in #1763
• docs: using GRPCRoute with AuthenticationFilter by @cnvergence in #1767
• Add ClusterIP to the services in the egctl test data by @Ronnie-personal in #1758
• docs: add proxy observability doc by @zirain in #1745
• refactor: split api helpers to envoygateway,envoyproxy and kubernetes helpers. by @qicz in #1545
• build(deps): bump sphinx from 7.1.1 to 7.1.2 in /tools/src/sphinx-build by @dependabot in #1771
• build(deps): bump go.uber.org/zap from 1.24.0 to 1.25.0 by @dependabot in #1769
• build(deps): bump sigs.k8s.io/controller-runtime from 0.15.0 to 0.15.1 by @dependabot in #1770
• api: bump gwapi to v0.8.0-rc1 by @Xunzhuo in #1778
• follow-up(doc, fix): support for grpcroute ratelimitfilter by @shawnh2 in #1766
• build(deps): bump kube-rbac-proxy from v0.11.0 to v0.14.1 by @arukiidou in #1781
• Add XDS keepalives by @jackkleeman in #1747
• move skriss to emeritus maintainers by @skriss in #1782
• Roadmap for v0.6.0 by @arkodg in #1783
• owner: add qicz to maintainers and move youngnick to emeritus by @Xunzhuo in #1779
• conformance: enable HTTPRouteRedirectPortAndScheme by @shawnh2 in #1601
• Make jwt fetch more reliable by @jackkleeman in #1784
• build(deps): bump actions/deploy-pages from 2.0.3 to 2.0.4 by @dependabot in #1790
• build(deps): bump github.com/golangci/golangci-lint from 1.53.3 to 1.54.1 in /tools/src/golangci-lint by @dependabot in #1789
• fix: implement comparable interface for ir.Xds to skip unnecessary updates by @dboslee in #1795
• rm make target helm-release by @arkodg in #1796
• fix: Ignore ports in host headers when matching against HTTPRoute hostnames by @jackkleeman in #1702
• fix: ensure all updates are processed in xds ir update test by @dboslee in #1799
• feat: support merging user and default bootstrap configurations by @zhaohuabing in #1791
• Add a Name field to a IR Route Destination by @arkodg in #1788
• fix: enqueue a single request for all resources by @dboslee in #1813
• build(deps): bump envoyproxy/toolshed from actions-v0.0.10 to 0.0.15 by @dependabot in #1802
• fix: can't show debug level logging message by @zhaohuabing in #1808
• build(deps): bump sphinx from 7.1.2 to 7.2.2 in /tools/src/sphinx-build by @dependabot in #1801
• Feat/service import backend support by @tanujd11 in #1705
• api: add stats_matcher for envoy's stats by @tmsnan in #1761
• bump k8s version used in e2e to v1.28 by @arkodg in #1816
• fix: enable ratelimit server start without initial config and add readiness probe for it by @shawnh2 in #1815
• build(deps): bump sphinx from 7.2.2 to 7.2.4 in /tools/src/sphinx-build by @dependabot in #1831
• build(deps): bump envoyproxy/toolshed from actions-v0.0.15 to 0.0.17 by @dependabot in #1832
• chore: bump gateway-api to v0.8.0-rc2 by @arkodg in #1817
• use / instead of - in IR Route Name by @arkodg in #1814
• feat: load balancer class support by @wondersd in #1840
• fix a typo: disabled -> disable by @rootsongjc in #1843
• add the missing required field type by @rootsongjc in #1848
• feat: bump gwapi to v0.8.0 by @Xunzhuo in #1847
• Add a key to the access default log text format by @arkodg in #1800
• add unmarshal error to EnvoyPatchPolicy status by @zhaohuabing in #1859
• fix: allow to set imagePullPolicy for kube-rbac-proxy container by @ElenaHenderson in #1858
• fix: prevent nil pointer panic because of nonexist attribute of Access Log by @ardikabs in #1838
• build(deps): bump sphinx from 7.2.4 to 7.2.5 in /tools/src/sphinx-build by @dependabot in #1865
• build(deps): bump sigs.k8s.io/controller-runtime from 0.16.0 to 0.16.1 by @dependabot in #1864
• build(deps): bump envoyproxy/toolshed from actions-v0.0.17 to 0.0.18 by @dependabot in #1863
• doc: fix incorrect item number in accesslog design doc by @shawnh2 in #1854
• docs: add note in quickstart to ensure LB exists by @arkodg in #1849
• fix docs string for access logs by @arkodg in #1850
• chore: use stable OS by @zirain in #1862
• docs: clean-up readme by @Xunzhuo in #1866
• Added docs and fix for ref grant in service import case by @tanujd11 in #1852
• 🐛 Fix: follow-up of #1852 by @Xunzhuo in #1869
• build(deps): bump actions/checkout from 3 to 4 by @dependabot in #1876
• chore: fix unicode error by @zirain in #1877
• fix: ensure the xds grpc server is properly stopped by @shawnh2 in #1860
• fix: skip the not found filters in grpc routes by @shawnh2 in #1873
• docs...