For the complete documentation index, see llms.txt. Markdown versions of all docs pages are available by appending .md to any docs URL.
Open Source Attribution
Review Open Source Attribution and Licenses.
Third-party components are not within Solo Support’s scope, regardless of how they are installed. For issues with third-party components, contact the respective vendor or open-source project community.
Solo provides Helm values to install certain third-party components as a convenience. The versions of Helm-installable components shipped with each Solo release are tested for compatibility with that release. Solo upgrades Helm references to third-party components as part of regular release activity to incorporate updates, which might include security fixes. For components you install independently, consult the respective vendor for CVE remediation.
| Component | Vendor / project |
|---|---|
| cert-manager | CNCF / cert-manager Authors |
| Grafana | Grafana Labs |
| OpenTelemetry collector | CNCF / OpenTelemetry Authors |
| Prometheus | CNCF / Prometheus Authors |
| Redis | Redis Ltd. |
Third-party open source software provided by Solo.io in connection with Gloo Gateway
{
| Name | Version | License |
|---|---|---|
| semver/v3 | v3.3.1 | MIT License |
| Netflix/go-expect | v0.0.0-20180928190340-9d1f4485533b | Apache License 2.0 |
| ahmetb/gen-crd-api-reference-docs | v0.3.1-0.20240214155107-6cf1ede4da61 | Apache License 2.0 |
| avast/retry-go | v2.4.3+incompatible | MIT License |
| retry-go/v4 | v4.3.3 | MIT License |
| aws/aws-sdk-go | v1.34.9 | Apache License 2.0 |
| xds/go | v0.0.0-20260202195803-dba9d589def2 | Apache License 2.0 |
| cratonica/2goarray | v0.0.0-20190331194516-514510793eaa | MIT License |
| envoyproxy/go-control-plane | v0.13.5-0.20250123154839-2a6715911fec | Apache License 2.0 |
| go-control-plane/contrib | v1.32.5-0.20250207140015-90270e3c85fd | Apache License 2.0 |
| go-control-plane/envoy | v1.32.5-0.20250211152746-ef139ef8ea6b | Apache License 2.0 |
| go-control-plane/ratelimit | v0.1.0 | Apache License 2.0 |
| envoyproxy/protoc-gen-validate | v1.3.3 | Apache License 2.0 |
| form3tech-oss/jwt-go | v3.2.5+incompatible | MIT License |
| fsnotify/fsnotify | v1.7.0 | BSD 3-clause “New” or “Revised” License |
| ghodss/yaml | v1.0.1-0.20190212211648-25d852aebe32 | MIT License |
| go-logr/zapr | v1.3.0 | Apache License 2.0 |
| go-openapi/loads | v0.19.4 | Apache License 2.0 |
| go-openapi/spec | v0.19.6 | Apache License 2.0 |
| go-openapi/swag | v0.23.0 | Apache License 2.0 |
| go-swagger/go-swagger | v0.21.0 | Apache License 2.0 |
| gogo/googleapis | v1.4.0 | Apache License 2.0 |
| gogo/protobuf | v1.3.2 | BSD 3-clause “New” or “Revised” License |
| jwt/v4 | v4.5.2 | MIT License |
| golang/protobuf | v1.5.4 | BSD 3-clause “New” or “Revised” License |
| google/go-cmp | v0.7.0 | BSD 3-clause “New” or “Revised” License |
| google/go-github | v17.0.0+incompatible | BSD 3-clause “New” or “Revised” License |
| go-github/v32 | v32.0.0 | BSD 3-clause “New” or “Revised” License |
| google/uuid | v1.6.0 | BSD 3-clause “New” or “Revised” License |
| gorilla/mux | v1.8.1 | BSD 3-clause “New” or “Revised” License |
| grpc-ecosystem/go-grpc-middleware | v1.4.0 | Apache License 2.0 |
| hinshun/vt10x | v0.0.0-20180809195222-d55458df857c | MIT License |
| imdario/mergo | v0.3.16 | BSD 3-clause “New” or “Revised” License |
| inconshreveable/go-update | v0.0.0-20160112193335-8152e7eb6ccf | UNKNOWN |
| jhump/protoreflect | v1.15.3 | Apache License 2.0 |
| kelseyhightower/envconfig | v1.4.0 | MIT License |
| go-httpbin/v2 | v2.15.0 | MIT License |
| olekukonko/tablewriter | v0.0.5 | MIT License |
| ginkgo/v2 | v2.22.1 | MIT License |
| onsi/gomega | v1.36.2 | MIT License |
| pkg/browser | v0.0.0-20180916011732-0a3d74bf9ce4 | BSD 2-clause “Simplified” License |
| pkg/errors | v0.9.1 | BSD 2-clause “Simplified” License |
| prometheus/client_golang | v1.23.2 | Apache License 2.0 |
| prometheus/client_model | v0.6.2 | Apache License 2.0 |
| prometheus/common | v0.67.5 | Apache License 2.0 |
| go-ruleguard/dsl | v0.3.22 | BSD 3-clause “New” or “Revised” License |
| rotisserie/eris | v0.5.4 | MIT License |
| saiskee/gettercheck | v0.0.0-20210820204958-38443d06ebe0 | MIT License |
| sergi/go-diff | v1.3.2-0.20230802210424-5b0b94c5c0d3 | MIT License |
| spf13/afero | v1.15.0 | Apache License 2.0 |
| spf13/cobra | v1.9.1 | Apache License 2.0 |
| spf13/pflag | v1.0.6 | BSD 3-clause “New” or “Revised” License |
| spf13/viper | v1.19.0 | MIT License |
| stoewer/go-strcase | v1.3.0 | MIT License |
| stretchr/testify | v1.11.1 | MIT License |
| go.opencensus.io | v0.24.0 | Apache License 2.0 |
| proto/otlp | v1.9.0 | Apache License 2.0 |
| go.uber.org/goleak | v1.3.0 | MIT License |
| go.uber.org/multierr | v1.11.0 | MIT License |
| go.uber.org/zap | v1.27.0 | MIT License |
| x/crypto | v0.53.0 | BSD 3-clause “New” or “Revised” License |
| x/exp | v0.0.0-20260410095643-746e56fc9e2f | BSD 3-clause “New” or “Revised” License |
| x/mod | v0.37.0 | BSD 3-clause “New” or “Revised” License |
| x/sync | v0.21.0 | BSD 3-clause “New” or “Revised” License |
| x/tools | v0.47.0 | BSD 3-clause “New” or “Revised” License |
| googleapis/api | v0.0.0-20260414002931-afd174a4e478 | Apache License 2.0 |
| googleapis/rpc | v0.0.0-20260414002931-afd174a4e478 | Apache License 2.0 |
| google.golang.org/grpc | v1.82.1 | Apache License 2.0 |
| google.golang.org/protobuf | v1.36.11 | BSD 3-clause “New” or “Revised” License |
| AlecAivazis/survey.v1 | v1.8.7 | MIT License |
| helm/v3 | v3.18.4 | Apache License 2.0 |
| istio.io/api | v1.25.2-0.20250410212420-84c271001f68 | Apache License 2.0 |
| istio.io/client-go | v1.25.2-0.20250410213018-e5f6074bc228 | Apache License 2.0 |
| istio.io/istio | v0.0.0-20250411142419-0d83506c2883 | Apache License 2.0 |
| k8s.io/api | v0.32.2 | Apache License 2.0 |
| k8s.io/apiextensions-apiserver | v0.32.2 | Apache License 2.0 |
| k8s.io/apimachinery | v0.32.2 | Apache License 2.0 |
| k8s.io/client-go | v0.32.2 | Apache License 2.0 |
| k8s.io/code-generator | v0.32.2 | Apache License 2.0 |
| k8s.io/component-base | v0.32.2 | Apache License 2.0 |
| k8s.io/kubectl | v0.32.2 | Apache License 2.0 |
| k8s.io/utils | v0.0.0-20241104100929-3ea5e8cea738 | Apache License 2.0 |
| knative.dev/networking | v0.0.0-20211210083629-bace06e98aee | Apache License 2.0 |
| knative.dev/pkg | v0.0.0-20211206113427-18589ac7627e | Apache License 2.0 |
| sigs.k8s.io/controller-runtime | v0.20.4 | Apache License 2.0 |
| sigs.k8s.io/controller-tools | v0.17.3 | Apache License 2.0 |
| sigs.k8s.io/gateway-api | v1.3.0 | Apache License 2.0 |
| structured-merge-diff/v4 | v4.7.0 | Apache License 2.0 |
| sigs.k8s.io/yaml | v1.4.0 | MIT License |
| cmd/goimports | latest | MIT License |
| gogo/protobuf | latest | MIT License |
| envoyproxy/envoy | latest | Apache License 2.0 |
| envoyproxy/protoc-gen-validate | latest | Apache License 2.0 |
| paulvollmer/2gobytes | latest | MIT License |
Free Software under GNU General Public License, and Mozilla Public License Software utilized by Gloo Gateway
| Name | Version | License |
|---|---|---|
| consul/api | v1.28.2 | Mozilla Public License 2.0 |
| hashicorp/go-multierror | v1.1.1 | Mozilla Public License 2.0 |
| hashicorp/go-uuid | v1.0.3 | Mozilla Public License 2.0 |
| vault/api | v1.8.2 | Mozilla Public License 2.0 |
| auth/aws | v0.3.0 | Mozilla Public License 2.0 |