Gloo Gateway Open Source Release Feed

v2.0.0-beta1 (v2.0.0)

Tue, 11 Mar 2025 14:08:38 GMT

Extra Notes
- The kgateway project is available as a Helm chart and docker images.
- The Helm chart is available at cr.kgateway.dev/kgateway-dev/charts/kgateway.
- The docker images are available at:
- cr.kgateway.dev/kgateway-dev/kgateway:v2.0.0-beta1
- cr.kgateway.dev/kgateway-dev/sds:v2.0.0-beta1
- cr.kgateway.dev/kgateway-dev/envoy-wrapper:v2.0.0-beta1
- Try installing this release:
- For detailed installation instructions and next steps, please visit our [quickstart guide](https://kgateway.dev/docs/quickstart/).

v1.22.3 (v1.22.0)

Thu, 27 Aug 2026 14:23:24 GMT

Helm Changes
- Fix the SDS container's readinessProbe so it falls back to the default probe only when `global.glooMtls.sds.readinessProbe` is unset, instead of always requiring a value from values-template.yaml. This lets users fully disable the probe by explicitly setting it to null/empty, and lets a partial override apply on top of an explicit probe without silently losing the default when none is provided. (https://github.com/solo-io/gloo/issues/11389)

v1.22.2 (v1.22.0)

Wed, 19 Aug 2026 19:06:28 GMT

Dependency Bumps
- golang/go has been upgraded to v1.26.6.
- oras.land/oras-go/v2 has been upgraded to v2.6.2.

v1.22.1 (v1.22.0)

Tue, 04 Aug 2026 21:16:09 GMT

Fixes
- Revert "fix: validate upstreams at admission in k8s gateway api mode (#11322)" which has a breaking change behavior that needs further consideration (https://github.com/solo-io/solo-projects/issues/8980)

v1.22.0 (v1.22.0)

Mon, 03 Aug 2026 23:23:26 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.36.9-patch1.
- golang/go has been upgraded to v1.26.5.
- golang.org/x/text has been upgraded to v0.39.0.
- google.golang.org/grpc has been upgraded to v1.82.1.
- oras.land/oras-go/v2 has been upgraded to v2.6.1.
- rancher/kubectl has been upgraded to v1.35.6.
Fixes
- POTENTIALLY BREAKING CHANGE: Keep a discovered Upstream's kube.selector in sync with its Kubernetes Service. It was previously set once at discovery and preserved on every resync, so changing a Service's spec.selector left EDS filtering endpoints against stale pod labels, which could leave the Upstream with no endpoints and break blue/green deployments. Note that discovery now owns kube.selector on discovered Upstreams, so if you have manually edited that field on one, your edit will be silently reverted on the next resync. To set a custom selector, use the Service's gloo.solo.io/upstream_config annotation (along with gloo.solo.io/upstream_config.deep_merge: "true") or manage your own Upstream instead. (https://github.com/solo-io/solo-projects/issues/9078)

v1.22.0-beta12 (v1.22.0)

Sun, 02 Aug 2026 19:40:40 GMT

New Features
- Add support for hostRewriteLiteral in the shadowing plugin, allowing users to replace the Host header of mirrored requests with a specific value. (https://github.com/solo-io/solo-projects/issues/9092)

v1.22.0-beta11 (v1.22.0)

Thu, 30 Jul 2026 21:56:01 GMT

Breaking Changes
- Fix a bug in the gateway translator where RouteOptions referenced by a route via delegateOptions were assigned by reference from the snapshot. When parent Virtual Service route options were later merged into these references, the shared snapshot proto was mutated, contaminating it for all other routes that referenced the same RouteOption for the remainder of the translation cycle. The referenced RouteOptions are now cloned before merging. The new GLOO_ISOLATE_DELEGATE_ROUTE_OPTIONS environment variable (default true) can be set to false to temporarily restore the legacy behavior. (https://github.com/solo-io/solo-projects/issues/8797)
Fixes
- Fix no-op Kubernetes Gateway report churn by comparing report maps by content and keeping status rendering read-only. The report-map equality checks used in change detection (glooProxy.Equals and report.Equals) compared maps of pointer values, so identical translation output could be reported as "changed" on every recompute; condition LastTransitionTime could also prevent convergence. Status rendering also wrote default conditions back into the report objects used for equality. Reports now compare semantically, ignore LastTransitionTime for change detection, and status rendering leaves ReportMap unchanged, allowing stable output to converge without redundant report/status processing. (https://github.com/solo-io/solo-projects/issues/8013)
- "remove xslt" (https://github.com/solo-io/solo-projects/issues/8981)
- Validate Upstreams at admission when using the Kubernetes Gateway API, so invalid configuration such as a corrupt grpcJsonTranscoder protoDescriptorBin is caught instead of causing Envoy to NACK at runtime. (https://github.com/solo-io/solo-projects/issues/8980)
Helm Changes
- Add gatewayProxies.NAME.kind.workloadType to explicitly select the gateway proxy workload type ("Deployment" or "DaemonSet"). When set, it takes precedence over the kind.deployment and kind.daemonSet fields, avoiding the ambiguity of an empty kind.deployment object that some GitOps tools normalize inconsistently; any other value fails at render time. When unset, behavior is unchanged. (https://github.com/solo-io/solo-projects/issues/8948)

v1.22.0-beta10 (v1.22.0)

Fri, 26 Jun 2026 15:16:43 GMT

Extra Notes
- This release contained no user-facing changes.

v1.22.0-beta9 (v1.22.0)

Thu, 25 Jun 2026 17:51:06 GMT

Dependency Bumps
- alpine/alpine has been upgraded to 3.24.1.
- containerd/containerd has been upgraded to v1.7.33.
- go-git/go-git has been upgraded to v5.19.0.
- go-git/go-billy has been upgraded to v5.9.0.
Fixes
- Add goMemLimitPercent Helm value to gloo and discovery deployments to compute GOMEMLIMIT as a percentage of limits.memory at render time. Previously GOMEMLIMIT was set to 100% of the cgroup limit via resourceFieldRef, leaving no headroom for Go GC and causing OOM kills during HPA prescale. Recommended value: 80-90%. (https://github.com/solo-io/gloo/issues/11285)

v1.22.0-beta8 (v1.22.0)

Mon, 15 Jun 2026 23:34:48 GMT

Dependency Bumps
- golang/go has been upgraded to v1.26.4.
- golang/net has been upgraded to v0.56.0.
- golang/sync has been upgraded to v0.21.0.
- golang/tools has been upgraded to v0.45.0.
- golang/mod has been upgraded to v0.36.0.
Fixes
- Fix grpcjson plugin to validate protoDescriptorBin bytes form a valid FileDescriptorSet before passing them to Envoy. Before this, invalid bytes would cause Envoy to NACK the RouteConfiguration while the Upstream falsely reported state: Accepted. (https://github.com/solo-io/solo-projects/issues/8979)

v1.22.0-beta7 (v1.22.0)

Thu, 04 Jun 2026 10:19:34 GMT

New Features
- Add support for disableShadowHostSuffixAppend in the shadowing plugin, allowing users to prevent the -shadow suffix from being appended to the Host header of mirrored requests. (https://github.com/solo-io/solo-projects/issues/8699)

v1.22.0-beta6 (v1.22.0)

Fri, 29 May 2026 19:37:05 GMT

Dependency Bumps
- solo-io/solo-apis has been upgraded to v0.0.0-20260529155429-309beeb6d941.

v1.22.0-beta5 (v1.22.0)

Tue, 19 May 2026 19:37:23 GMT

Breaking Changes
- Fixed helm template for proxy deployment kind check to correctly detect empty map/object. While this is technically a fix but if any user relies on the existing behavior that has deployed the proxy as daemonset, this can be a breaking change. (https://github.com/solo-io/solo-projects/issues/8948)

v1.22.0-beta4 (v1.22.0)

Wed, 06 May 2026 14:53:57 GMT

Fixes
- Add mkdir -p in push-docs workflow before copying CLI reference docs to ensure destination directory exists for new minor versions. (https://github.com/solo-io/gloo/pull/11225)
New Features
- Add `audiences` field to `JwtValidation` in the extauth API. When set, the JWT's `aud` claim must intersect this list; when empty or unset, audience validation is skipped. (https://github.com/solo-io/gloo-gateway/issues/1494)

v1.22.0-beta3 (v1.22.0)

Wed, 29 Apr 2026 00:11:39 GMT

Fixes
- "upgrade doc custom_auth dockerfile and detect certgen fips image fips" (https://github.com/solo-io/solo-projects/issues/8887)
- Make SDS cert rotation more resilient to non-atomic Istio cert writes by debouncing file watcher reloads and retrying until the certificate and key form a valid pair before publishing a new snapshot. (https://github.com/solo-io/solo-projects/issues/8911)
New Features
- Add ipV4Only Setting for Gateway API Mode which sets the bind address to `0.0.0.0` instead of `::`. Defaults to false (https://github.com/solo-io/solo-projects/issues/8916)

v1.22.0-beta2 (v1.22.0)

Fri, 17 Apr 2026 17:29:51 GMT

Dependency Bumps
- golang/go has been upgraded to v1.26.2.
- open-telemetry/opentelemetry-go has been upgraded to v1.43.0.

v1.22.0-beta1 (v1.22.0)

Thu, 02 Apr 2026 22:01:04 GMT

Fixes
- Fixes protobuf registration panic when building glooctl with homebrew. (https://github.com/solo-io/gloo/issues/11195)
New Features
- Add enterprise ExtAuth AuthConfig API/CRD support for API-key SHA256 digest configuration via `apiKeyAuth.digest` and same-name header matching via `apiKeyAuth.match`. This PR adds the proto/schema/generated API surface only; runtime verification behavior is implemented in downstream ext-auth-service. (https://github.com/solo-io/gloo-gateway/issues/1581)

v1.21.15 (v1.21.0)

Thu, 27 Aug 2026 14:59:04 GMT

v1.21.14 (v1.21.0)

Wed, 19 Aug 2026 19:06:57 GMT

Dependency Bumps
- golang/go has been upgraded to v1.26.6.
- oras.land/oras-go/v2 has been upgraded to v2.6.2.

v1.21.13 (v1.21.0)

Wed, 05 Aug 2026 16:03:40 GMT

Dependency Bumps
- golang/go has been upgraded to v1.26.5.
- golang.org/x/text has been upgraded to v0.39.0.
- google.golang.org/grpc has been upgraded to v1.82.1.
- oras.land/oras-go/v2 has been upgraded to v2.6.1.
- rancher/kubectl has been upgraded to v1.35.6.
Fixes
- Revert "fix: validate upstreams at admission in k8s gateway api mode (#11322)" which has a breaking change behavior that needs further consideration (https://github.com/solo-io/solo-projects/issues/8980)
New Features
- Add support for hostRewriteLiteral in the shadowing plugin, allowing users to replace the Host header of mirrored requests with a specific value. (https://github.com/solo-io/solo-projects/issues/9092)

v1.21.12 (v1.21.0)

Thu, 16 Jul 2026 16:11:26 GMT

Fixes
- Fix no-op Kubernetes Gateway report churn by comparing report maps by content and keeping status rendering read-only. The report-map equality checks used in change detection (glooProxy.Equals and report.Equals) compared maps of pointer values, so identical translation output could be reported as "changed" on every recompute; condition LastTransitionTime could also prevent convergence. Status rendering also wrote default conditions back into the report objects used for equality. Reports now compare semantically, ignore LastTransitionTime for change detection, and status rendering leaves ReportMap unchanged, allowing stable output to converge without redundant report/status processing. (https://github.com/solo-io/solo-projects/issues/8013)

v1.21.11 (v1.21.0)

Fri, 26 Jun 2026 17:00:53 GMT

Extra Notes
- This release contained no user-facing changes.

v1.21.10 (v1.21.0)

Thu, 25 Jun 2026 20:24:21 GMT

Dependency Bumps
- alpine/alpine has been upgraded to 3.24.1.
- containerd/containerd has been upgraded to v1.7.33.
- go-git/go-git has been upgraded to v5.19.0.
- go-git/go-billy has been upgraded to v5.9.0.
- solo-io/envoy-gloo has been upgraded to v1.36.9-patch1.
- golang/net has been upgraded to v0.56.0.
- golang/sync has been upgraded to v0.21.0.
- golang/tools has been upgraded to v0.45.0.
- golang/mod has been upgraded to v0.36.0.
Fixes
- "added missing certgen-fips in helm helpers template" (https://github.com/solo-io/solo-projects/issues/8887)
- Add goMemLimitPercent Helm value to gloo and discovery deployments to compute GOMEMLIMIT as a percentage of limits.memory at render time. Previously GOMEMLIMIT was set to 100% of the cgroup limit via resourceFieldRef, leaving no headroom for Go GC and causing OOM kills during HPA prescale. Recommended value: 80-90%. (https://github.com/solo-io/gloo/issues/11285)

v1.21.9 (v1.21.0)

Fri, 12 Jun 2026 21:31:33 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.36.8-patch1.
Fixes
- Fix grpcjson plugin to validate protoDescriptorBin bytes form a valid FileDescriptorSet before passing them to Envoy. Before this, invalid bytes would cause Envoy to NACK the RouteConfiguration while the Upstream falsely reported state: Accepted. (https://github.com/solo-io/solo-projects/issues/8979)
Extra Notes
- *This release is building...*

v1.21.8 (v1.21.0)

Fri, 05 Jun 2026 18:50:20 GMT

Dependency Bumps
- golang/go has been upgraded to v1.26.4.

v1.21.7 (v1.21.0)

Fri, 05 Jun 2026 13:57:41 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.36.7-patch1.

v1.21.6 (v1.21.0)

Fri, 22 May 2026 20:26:19 GMT

Dependency Bumps
- alpine/alpine has been upgraded to 3.23.4.
Fixes
- Update certgen dependency versions for security fixes. (https://github.com/solo-io/gloo/issues/9034)

v1.21.4 (v1.21.0)

Tue, 28 Apr 2026 16:24:30 GMT

Fixes
- Add ipV4Only Setting for Gateway API Mode which sets the bind address to `0.0.0.0` instead of `::`. Defaults to false (https://github.com/solo-io/solo-projects/issues/8916)
- Make SDS cert rotation more resilient to non-atomic Istio cert writes by debouncing file watcher reloads and retrying until the certificate and key form a valid pair before publishing a new snapshot. (https://github.com/solo-io/solo-projects/issues/8911)

v1.21.3 (v1.21.0)

Thu, 16 Apr 2026 22:49:15 GMT

Dependency Bumps
- golang/go has been upgraded to v1.26.2.
- open-telemetry/opentelemetry-go has been upgraded to v1.43.0.

v1.21.2 (v1.21.0)

Tue, 31 Mar 2026 17:58:01 GMT

Fixes
- Fixes protobuf registration panic when building glooctl with homebrew. (https://github.com/solo-io/gloo/issues/11195)

v1.21.1 (v1.21.0)

Wed, 25 Mar 2026 20:44:05 GMT

Extra Notes
- This release contained no user-facing changes.

v1.21.0 (v1.21.0)

Wed, 25 Mar 2026 17:44:55 GMT

Fixes
- CVE updates (https://github.com/solo-io/solo-projects/issues/8848)

v1.21.0-beta18 (v1.21.0)

Wed, 18 Mar 2026 16:01:53 GMT

Dependency Bumps
- sigs.k8s.io/gateway-api has been upgraded to v1.4.1.
- solo-io/cloud-builders has been upgraded to v0.15.0.
- k8s.io/api has been upgraded to v0.35.2.
- k8s.io/apiextensions-apiserver has been upgraded to v0.35.2.
- k8s.io/apimachinery has been upgraded to v0.35.2.
- k8s.io/apiserver has been upgraded to v0.35.2.
- k8s.io/cli-runtime has been upgraded to v0.35.2.
- k8s.io/client-go has been upgraded to v0.35.2.
- k8s.io/code-generator has been upgraded to v0.35.2.
- k8s.io/component-base has been upgraded to v0.35.2.
- k8s.io/component-helpers has been upgraded to v0.35.2.
- k8s.io/kubectl has been upgraded to v0.35.2.
- k8s.io/metrics has been upgraded to v0.35.2.
- solo-io/go-utils has been upgraded to v0.30.0.
- solo-io/k8s-utils has been upgraded to v0.13.0.
- solo-io/skv2 has been upgraded to v0.46.0.
- solo-io/solo-kit has been upgraded to v0.41.0.

v1.21.0-beta17 (v1.21.0)

Wed, 11 Mar 2026 18:23:33 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.36.5-patch1.
- golang/go has been upgraded to v1.26.1.
- golang/net has been upgraded to v0.51.0.
- containerd/containerd has been upgraded to v1.7.30.
- open-telemetry/opentelemetry-go has been upgraded to v1.41.0.
Fixes
- Add only one wait UpstreamHTTPFilter if multiple have been specified. (https://github.com/solo-io/gloo/issues/11142)

v1.21.0-beta16 (v1.21.0)

Tue, 03 Mar 2026 17:11:25 GMT

New Features
- Add connect_terminate support for CONNECT protocol termination in Dynamic Forward Proxy. This enables TCP tunneling for HTTPS traffic through DFP by setting Envoy's connect_config on route upgrade configurations. Users can configure connectTerminate in protocol upgrades to enable HTTPS proxying through CONNECT tunnels. (https://github.com/solo-io/solo-projects/issues/8746)

v1.21.0-beta15 (v1.21.0)

Fri, 27 Feb 2026 23:02:13 GMT

New Features
- Add enterprise ExtAuth AuthConfig API/CRD support for API-key HMAC digest configuration via `apiKeyAuth.hmac` (including `HMAC_SHA256` algorithm and `sharedSecretRef`). This PR adds the proto/schema/generated API surface only; runtime verification behavior is implemented in downstream ext-auth-service. (https://github.com/solo-io/gloo-gateway/issues/1581)

v1.21.0-beta14 (v1.21.0)

Thu, 26 Feb 2026 19:19:22 GMT

Dependency Bumps
- golang/go has been upgraded to v1.25.7.
- solo-io/cloud-builders has been upgraded to v0.14.2.
- golang/go has been upgraded to v1.25.6.
- solo-io/cloud-builders has been upgraded to v0.14.1.
Fixes
- fixed snapshot out of sync with envoy when upstream points to invalid service (https://github.com/solo-io/solo-projects/issues/8668)
- updated alpine image version and go version for security fixes (https://github.com/solo-io/gloo/issues/11119)
New Features
- Enable HPA support by making replicas optional in the Gateway proxy deployment. When replicas is not set in GatewayParameters, the replicas field is omitted from the deployment spec, allowing HorizontalPodAutoscaler to manage scaling. A minimum replicas validation is enforced when the field is set. (https://github.com/solo-io/gloo/issues/11133)
- Add two new configs, ExtProcEarly && ExtProcLate. The former can be run at a specified stage, but the latter runs as the final filter before a request leaves envoy and the first filter when the response enters envoy. (https://github.com/solo-io/gloo-gateway/issues/1495)

v1.21.0-beta13 (v1.21.0)

Thu, 15 Jan 2026 19:53:23 GMT

Breaking Changes
- Mark XSLT transformation as deprecated. (https://github.com/solo-io/solo-projects/issues/8658)

v1.21.0-beta12 (v1.21.0)

Tue, 13 Jan 2026 02:39:17 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.36.4-patch1.
- rancher/kubectl has been upgraded to v1.34.3.
Fixes
- When oneWayTls is set to true, the ValidationContext is removed to prevent Envoy from requesting a client certificate during the TLS handshake. (https://github.com/solo-io/solo-projects/issues/8654)

v1.21.0-beta11 (v1.21.0)

Mon, 05 Jan 2026 19:19:25 GMT

New Features
- feat: support regex patterns for matching RBAC policies for Gloo Enterprise instead of globs after discussion with Duncan (https://github.com/solo-io/solo-projects/issues/8612)

v1.21.0-beta10 (v1.21.0)

Fri, 02 Jan 2026 18:30:21 GMT

New Features
- feat: support glob patterns for matching RBAC policies for Gloo Enterprise (https://github.com/solo-io/solo-projects/issues/8612)

v1.21.0-beta9 (v1.21.0)

Thu, 18 Dec 2025 18:26:02 GMT

Extra Notes
- This release contained no user-facing changes.

v1.21.0-beta8 (v1.21.0)

Thu, 18 Dec 2025 16:11:36 GMT

Extra Notes
- This release contained no user-facing changes.

v1.21.0-beta7 (v1.21.0)

Wed, 17 Dec 2025 20:22:41 GMT

Dependency Bumps
- sigs.k8s.io/gateway-api has been upgraded to v1.4.1.
- sigs.k8s.io/controller-runtime has been upgraded to v0.22.1.
- solo-io/cloud-builders has been upgraded to v0.14.0.
- k8s.io/api has been upgraded to v0.34.2.
- k8s.io/apiextensions-apiserver has been upgraded to v0.34.2.
- k8s.io/apimachinery has been upgraded to v0.34.2.
- k8s.io/apiserver has been upgraded to v0.34.2.
- k8s.io/cli-runtime has been upgraded to v0.34.2.
- k8s.io/client-go has been upgraded to v0.34.2.
- k8s.io/code-generator has been upgraded to v0.34.2.
- k8s.io/component-base has been upgraded to v0.34.2.
- k8s.io/component-helpers has been upgraded to v0.34.2.
- k8s.io/kubectl has been upgraded to v0.34.2.
- k8s.io/metrics has been upgraded to v0.34.2.
- solo-io/go-utils has been upgraded to v0.29.0.
- solo-io/k8s-utils has been upgraded to v0.12.0.
- solo-io/protoc-gen-openapi has been upgraded to v0.4.0.
- solo-io/skv2 has been upgraded to v0.45.0.
- solo-io/solo-apis has been upgraded to v0.0.0-20251212201919-e8dd072aea09.
- solo-io/solo-kit has been upgraded to v0.40.0.

v1.21.0-beta6 (v1.21.0)

Fri, 05 Dec 2025 18:23:54 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.36.3-patch1.
Helm Changes
- kubeResourceOverride fails to apply to proxy resources (PDB, HPA, ConfigMap, Service) when multiple gateways are rendered, breaking overrides. This fixes the Helm rendering issues. (https://github.com/solo-io/solo-projects/issues/8674)

v1.21.0-beta5 (v1.21.0)

Thu, 23 Oct 2025 17:42:13 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.36.2-patch1.
- golang/go has been upgraded to v1.24.9.
- solo-io/cloud-builders has been upgraded to v0.13.2.
Fixes
- Fixes a bug where the the default gatewayProxy when disabled would create invalid helm templates for custom proxies. (https://github.com/solo-io/solo-projects/issues/8613)

v1.21.0-beta4 (v1.21.0)

Thu, 25 Sep 2025 06:17:20 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.35.2-patch3.

v1.21.0-beta3 (v1.21.0)

Thu, 18 Sep 2025 00:15:41 GMT

Extra Notes
- This release contained no user-facing changes.

v1.21.0-beta2 (v1.21.0)

Wed, 17 Sep 2025 16:32:59 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.35.2-patch2.

v1.21.0-beta1 (v1.21.0)

Fri, 05 Sep 2025 13:15:29 GMT

Dependency Bumps
- istio/istio has been upgraded to v1.27.0.
- kubernetes/kubernetes has been upgraded to v1.34.0.
- solo-io/envoy-gloo has been upgraded to v1.35.2-patch1.
New Features
- updated ai.proto to support customhost in all AI providers (https://github.com/solo-io/solo-projects/issues/8438)
- Updated transformation.proto to add auto_websocket_passthrough option. Added gloo setting enableAutoWebsocketTransformationPassthrough to control the behavior (default false) (https://github.com/solo-io/solo-projects/issues/8530)

v1.20.24 (v1.20.0)

Thu, 27 Aug 2026 15:02:30 GMT

v1.20.23 (v1.20.0)

Wed, 19 Aug 2026 19:08:44 GMT

Dependency Bumps
- golang/go has been upgraded to v1.25.13.
- oras.land/oras-go/v2 has been upgraded to v2.6.2.

v1.20.22 (v1.20.0)

Wed, 05 Aug 2026 17:29:31 GMT

Dependency Bumps
- golang/go has been upgraded to v1.25.12.
- golang.org/x/text has been upgraded to v0.39.0.
- google.golang.org/grpc has been upgraded to v1.82.1.
- oras.land/oras-go/v2 has been upgraded to v2.6.1.
- rancher/kubectl has been upgraded to v1.34.9.
Fixes
- Fix no-op Kubernetes Gateway report churn by comparing report maps by content and keeping status rendering read-only. The report-map equality checks used in change detection (glooProxy.Equals and report.Equals) compared maps of pointer values, so identical translation output could be reported as "changed" on every recompute; condition LastTransitionTime could also prevent convergence. Status rendering also wrote default conditions back into the report objects used for equality. Reports now compare semantically, ignore LastTransitionTime for change detection, and status rendering leaves ReportMap unchanged, allowing stable output to converge without redundant report/status processing. (https://github.com/solo-io/solo-projects/issues/8013)
- Revert "fix: validate upstreams at admission in k8s gateway api mode (#11322)" which has a breaking change behavior that needs further consideration (https://github.com/solo-io/solo-projects/issues/8980)

v1.20.21 (v1.20.0)

Fri, 26 Jun 2026 17:02:11 GMT

Extra Notes
- This release contained no user-facing changes.

v1.20.20 (v1.20.0)

Thu, 25 Jun 2026 20:24:37 GMT

Dependency Bumps
- alpine/alpine has been upgraded to 3.24.1.
- containerd/containerd has been upgraded to v1.7.33.
- go-git/go-git has been upgraded to v5.19.0.
- go-git/go-billy has been upgraded to v5.9.0.
- golang/net has been upgraded to v0.56.0.
- golang/sync has been upgraded to v0.21.0.
- golang/tools has been upgraded to v0.45.0.
- golang/mod has been upgraded to v0.36.0.
Fixes
- "added missing certgen-fips in helm helpers template" (https://github.com/solo-io/solo-projects/issues/8887)
- Add goMemLimitPercent Helm value to gloo and discovery deployments to compute GOMEMLIMIT as a percentage of limits.memory at render time. Previously GOMEMLIMIT was set to 100% of the cgroup limit via resourceFieldRef, leaving no headroom for Go GC and causing OOM kills during HPA prescale. Recommended value: 80-90%. (https://github.com/solo-io/gloo/issues/11285)

v1.20.19 (v1.20.0)

Fri, 12 Jun 2026 20:41:06 GMT

Dependency Bumps
- golang/go has been upgraded to v1.25.11.
Fixes
- Fix grpcjson plugin to validate protoDescriptorBin bytes form a valid FileDescriptorSet before passing them to Envoy. Before this, invalid bytes would cause Envoy to NACK the RouteConfiguration while the Upstream falsely reported state: Accepted. (https://github.com/solo-io/solo-projects/issues/8979)
Extra Notes
- *This release is building...*

v1.20.18 (v1.20.0)

Fri, 05 Jun 2026 19:50:56 GMT

Extra Notes
- This release contained no user-facing changes.

v1.20.17 (v1.20.0)

Fri, 22 May 2026 21:34:03 GMT

Dependency Bumps
- alpine/alpine has been upgraded to 3.23.4.
Fixes
- Update certgen dependency versions for security fixes. (https://github.com/solo-io/gloo/issues/9034)

v1.20.14 (v1.20.0)

Tue, 28 Apr 2026 16:24:39 GMT

v1.20.13 (v1.20.0)

Thu, 16 Apr 2026 22:49:52 GMT

Dependency Bumps
- golang/go has been upgraded to v1.25.9.
- grpc/grpc-go has been upgraded to v1.79.3.
- open-telemetry/opentelemetry-go has been upgraded to v1.43.0.
- rancher/kubectl has been upgraded to v1.34.5.

v1.20.12 (v1.20.0)

Wed, 11 Mar 2026 18:23:38 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.35.9-patch1.
- golang/go has been upgraded to v1.25.8.
- golang/net has been upgraded to v0.51.0.
- containerd/containerd has been upgraded to v1.7.30.
- open-telemetry/opentelemetry-go has been upgraded to v1.41.0.
New Features
- Add connect_terminate support for CONNECT protocol termination in Dynamic Forward Proxy. This enables TCP tunneling for HTTPS traffic through DFP by setting Envoy's connect_config on route upgrade configurations. Users can configure connectTerminate in protocol upgrades to enable HTTPS proxying through CONNECT tunnels. (https://github.com/solo-io/solo-projects/issues/8746)

v1.20.11 (v1.20.0)

Wed, 04 Mar 2026 14:34:09 GMT

Fixes
- Add only one wait UpstreamHTTPFilter if multiple have been specified. (https://github.com/solo-io/gloo/issues/11142)
- Add two new configs, ExtProcEarly && ExtProcLate. The former can be run at a specified stage, but the latter runs as the final filter before a request leaves envoy and the first filter when the response enters envoy. (https://github.com/solo-io/gloo-gateway/issues/1495)

v1.20.10 (v1.20.0)

Thu, 26 Feb 2026 15:35:53 GMT

Fixes
- fixed snapshot out of sync with envoy when upstream points to invalid service (https://github.com/solo-io/solo-projects/issues/8668)
- Enable HPA support by making replicas optional in the Gateway proxy deployment. When replicas is not set in GatewayParameters, the replicas field is omitted from the deployment spec, allowing HorizontalPodAutoscaler to manage scaling. A minimum replicas validation is enforced when the field is set. (https://github.com/solo-io/gloo/issues/11133)

v1.20.9 (v1.20.0)

Tue, 13 Jan 2026 01:10:51 GMT

Dependency Bumps
- rancher/kubectl has been upgraded to v1.34.3.

v1.20.8 (v1.20.0)

Fri, 09 Jan 2026 10:48:56 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.35.8-patch1.
Fixes
- When oneWayTls is set to true, the ValidationContext is removed to prevent Envoy from requesting a client certificate during the TLS handshake. (https://github.com/solo-io/solo-projects/issues/8654)

v1.20.7 (v1.20.0)

Mon, 29 Dec 2025 18:52:42 GMT

Extra Notes
- This release contained no user-facing changes.

v1.20.6 (v1.20.0)

Fri, 26 Dec 2025 14:50:35 GMT

Extra Notes
- This release contained no user-facing changes.

v1.20.5 (v1.20.0)

Mon, 22 Dec 2025 20:08:24 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.11.

v1.20.4 (v1.20.0)

Fri, 05 Dec 2025 15:48:18 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.35.7-patch1.

v1.20.3 (v1.20.0)

Wed, 22 Oct 2025 16:16:41 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.35.6-patch1.
- golang/go has been upgraded to v1.24.9.
- solo-io/cloud-builders has been upgraded to v0.13.2.
Fixes
- Bump the alpine base container image to 3.21.5 (https://github.com/solo-io/solo-projects/issues/8620)
- Fixes a bug where the the default gatewayProxy when disabled would create invalid helm templates for custom proxies. (https://github.com/solo-io/solo-projects/issues/8613)

v1.20.2 (v1.20.0)

Thu, 16 Oct 2025 14:39:54 GMT

Fixes
- Fixes a crash caused by missing rbac during upgrades from 1.19 (https://github.com/solo-io/solo-projects/issues/8609)

v1.20.1 (v1.20.0)

Thu, 25 Sep 2025 06:17:58 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.35.2-patch3.

v1.20.0 (v1.20.0)

Tue, 23 Sep 2025 15:07:50 GMT

Dependency Bumps
- solo-io/solo-kit has been upgraded to v0.39.4.

v1.20.0-rc4 (v1.20.0)

Fri, 19 Sep 2025 19:43:53 GMT

Extra Notes
- This release contained no user-facing changes.

v1.20.0-rc3 (v1.20.0)

Wed, 17 Sep 2025 22:02:20 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.35.2-patch2.

v1.20.0-rc2 (v1.20.0)

Sat, 06 Sep 2025 12:57:10 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.35.2-patch1.
- istio/istio has been upgraded to v1.27.0.
- kubernetes/kubernetes has been upgraded to v1.34.0.
New Features
- updated ai.proto to support customhost in all AI providers (https://github.com/solo-io/solo-projects/issues/8438)
- Updated transformation.proto to add auto_websocket_passthrough option. Added gloo setting enableAutoWebsocketTransformationPassthrough to control the behavior (default false) (https://github.com/solo-io/solo-projects/issues/8530)

v1.20.0-rc1 (v1.20.0)

Fri, 22 Aug 2025 18:01:33 GMT

Extra Notes
- This release contained no user-facing changes.

v1.20.0-beta12 (v1.20.0)

Wed, 20 Aug 2025 13:43:28 GMT

Breaking Changes
- Remove GraphQL support from Gloo Gateway. GraphQL functionality has been fully removed after being deprecated in v1.18.0. The GraphQL CRDs, client code, discovery functionality, and route processing have been removed. Some proto files remain to prevent future use of these names and fields. (https://github.com/solo-io/solo-projects/issues/7162)
Dependency Bumps
- bitnami/kubectl has been upgraded to v1.33.3.
New Features
- Add support for rate limited retry backoff with reset headers. This is available on the RouteOptions API as a new field `rate_limited_retry_backoff`. (https://github.com/kgateway-dev/kgateway/issues/4316)

v1.20.0-beta11 (v1.20.0)

Tue, 12 Aug 2025 18:15:02 GMT

Dependency Bumps
- envoyproxy v0.13.5-0.20250805143705-d51f8590a549/go-control-plane has been upgraded to v0.13.5-0.20250805143705-d51f8590a549.
- envoyproxy v0.13.5-0.20250805143705-d51f8590a549/go-control-plane/envoy has been upgraded to v1.32.5-0.20250805143705-d51f8590a549.
- opentelemetry v1.7.1/proto/otlp has been upgraded to v1.7.1.
- golang/crypto has been upgraded to v0.40.0.
- golang/sync has been upgraded to v0.16.0.
- golang/tools has been upgraded to v0.34.0.
- golang/grpc has been upgraded to v1.74.2.
- golang/go has been upgraded to v1.24.6.
- solo-io/cloud-builders has been upgraded to v0.13.1.
- solo-io/go-utils has been upgraded to v0.28.6.
- solo-io/k8s-utils has been upgraded to v0.11.1.
- solo-io/skv2 has been upgraded to v0.44.1.
- solo-io/solo-kit has been upgraded to v0.39.1.
- bitnami/kubectl has been upgraded to v1.33.3.
- helm.sh/helm has been upgraded to v3.18.4.
Fixes
- Mark the cache filter as deprecated.
- Ensure that when one-way TLS is enabled, the upstream TLS context is configured correctly to validate the server certificate. (https://github.com/solo-io/solo-projects/issues/8499)
Helm Changes
- Prevent HPA creation when a gateway proxy is disabled. (https://github.com/solo-io/solo-projects/issues/8520)
New Features
- Expose the max cache size for the OpenTelemetry collector in the tracing settings. (https://github.com/solo-io/gloo/issues/10950)

v1.20.0-beta10 (v1.20.0)

Fri, 01 Aug 2025 15:59:48 GMT

Extra Notes
- This release contained no user-facing changes.

v1.20.0-beta9 (v1.20.0)

Tue, 29 Jul 2025 17:33:11 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.35.0-patch1.
New Features
- Added support for mTLS in passthrough authentication. This provides the ability to configure simple TLS or mTLS for both HTTP and gRPC passthrough authentication. (https://github.com/solo-io/ext-auth-service/issues/867)

v1.20.0-beta8 (v1.20.0)

Thu, 10 Jul 2025 15:49:47 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to 1.34.1-patch4.
New Features
- Expose ecdh-curves TLS settings for listeners (https://github.com/solo-io/solo-projects/issues/8456)

v1.20.0-beta7 (v1.20.0)

Mon, 23 Jun 2025 18:18:44 GMT

Fixes
- For clusters generated for the dynamic forward proxy, the circuit breakers are now generated from the dfp config, if provided, otherwise from the settings. If the circuitBreakers are not provided in either location, envoy will use the default circuit breakers. (https://github.com/solo-io/solo-projects/issues/8094)

v1.20.0-beta6 (v1.20.0)

Tue, 17 Jun 2025 15:28:24 GMT

Breaking Changes
- Bump dependencies to support Kubernetes 1.33.1 (https://github.com/solo-io/solo-projects/issues/8102)
Dependency Bumps
- golang/go has been upgraded to v1.24.4.
- k8s.io/api has been upgraded to v0.33.1.
- k8s.io/apimachinery has been upgraded to v0.33.1.
- k8s.io/apiextensions-apiserver has been upgraded to v0.33.1.
- k8s.io/client-go has been upgraded to v0.33.1.
- k8s.io/kubectl has been upgraded to v0.33.1.
- helm/helm has been upgraded to v3.17.3.
- google/protobuf has been upgraded to v1.36.5.
- solo-io/go-utils has been upgraded to v0.28.5.
- controller-runtime/controller-runtime has been upgraded to v0.22.1.
- solo-io/k8s-utils has been upgraded to v0.11.0.
- solo-io/skv2 has been upgraded to v0.44.0.
- solo-io/solo-kit has been upgraded to v0.39.0.
- solo-io/solo-apis has been upgraded to v0.0.0-20240616171238-dd7b8dbf6a9b.
- solo-io/cloud-builders has been upgraded to v0.13.0.
New Features
- This adds a cli command 'glooctl usage' to collect usage stats from Gloo Edge APIs. (https://github.com/solo-io/solo-projects/issues/10820)

v1.20.0-beta5 (v1.20.0)

Mon, 16 Jun 2025 15:43:51 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to 1.34.1-patch3.
- envoyproxy/go-control-plane has been upgraded to v0.13.5-0.20250507123352-93990c5ec02f.

v1.20.0-beta4 (v1.20.0)

Fri, 06 Jun 2025 16:46:55 GMT

Fixes
- Setting the `uuidRequestIdConfig` in the `HttpConnectionManagerSettings` now correctly sets the `RequestIdExtension` in the `HttpConnectionManager` filter.
New Features
- [AI] proto file change to support path override in custom host (https://github.com/solo-io/solo-projects/issues/8305)

v1.20.0-beta3 (v1.20.0)

Wed, 28 May 2025 17:18:40 GMT

Breaking Changes
- Disable discovery by default for helm installs and upgrades. (https://github.com/solo-io/solo-projects/issues/7292)
- Fix a bug in the gloo_solo_io_namespaces_watched metric that errors when the list of namespaces watched is large. (https://github.com/solo-io/solo-projects/issues/8319)

v1.20.0-beta2 (v1.20.0)

Fri, 09 May 2025 18:13:03 GMT

Dependency Bumps
- sigs.k8s.io/gateway-api has been upgraded to v1.3.0.
- sigs.k8s.io/controller-runtime has been upgraded to v0.20.4.
- golang.org/x/crypto has been upgraded to v0.37.0.
- golang.org/x/sync has been upgraded to v0.13.0.
- google.golang.org/grpc has been upgraded to v1.71.1.
Fixes
- Fix a bug where the gloo pod crashes if the install and write namespace are different. (https://github.com/solo-io/solo-projects/issues/8183)
New Features
- Add an API to allow configuring AWS Bedrock as AI upstream. (https://github.com/solo-io/solo-projects/issues/7291)

v1.20.0-beta1 (v1.20.0)

Fri, 25 Apr 2025 19:30:40 GMT

New Features
- Added support for sending gateway access logs to an OpenTelemetry collector. (https://github.com/solo-io/solo-projects/issues/6661)
- Added support for reporting ListenerOption status. Issues/conflicts with ListenerOptions are now reported in the resource's status. (https://github.com/solo-io/solo-projects/issues/6344)

v1.19.22 (v1.19.0)

Thu, 27 Aug 2026 15:14:25 GMT

v1.19.21 (v1.19.0)

Wed, 19 Aug 2026 19:09:28 GMT

Dependency Bumps
- golang/go has been upgraded to v1.25.13.
- oras.land/oras-go/v2 has been upgraded to v2.6.2.

v1.19.20 (v1.19.0)

Wed, 05 Aug 2026 16:03:22 GMT

v1.19.19 (v1.19.0)

Fri, 26 Jun 2026 16:21:36 GMT

Extra Notes
- This release contained no user-facing changes.

v1.19.18 (v1.19.0)

Wed, 24 Jun 2026 21:19:19 GMT

v1.19.17 (v1.19.0)

Fri, 22 May 2026 21:32:46 GMT

Dependency Bumps
- alpine/alpine has been upgraded to 3.23.4.
Fixes
- Update certgen dependency versions for security fixes. (https://github.com/solo-io/gloo/issues/9034)

v1.19.15 (v1.19.0)

Mon, 27 Apr 2026 21:26:46 GMT

Extra Notes
- This release contained no user-facing changes.

v1.19.14 (v1.19.0)

Thu, 16 Apr 2026 22:50:40 GMT

v1.19.13 (v1.19.0)

Wed, 11 Mar 2026 14:38:30 GMT

Dependency Bumps
- golang/go has been upgraded to v1.25.8.
- golang/net has been upgraded to v0.51.0.
- containerd/containerd has been upgraded to v1.7.30.
- open-telemetry/opentelemetry-go has been upgraded to v1.41.0.

v1.19.12 (v1.19.0)

Wed, 04 Mar 2026 18:04:31 GMT

Fixes
- Add only one wait UpstreamHTTPFilter if multiple have been specified. (https://github.com/solo-io/gloo/issues/11142)
- fixed snapshot out of sync with envoy when upstream points to invalid service (https://github.com/solo-io/solo-projects/issues/8668)
- Add two new configs, ExtProcEarly && ExtProcLate. The former can be run at a specified stage, but the latter runs as the final filter before a request leaves envoy and the first filter when the response enters envoy. (https://github.com/solo-io/gloo-gateway/issues/1495)

v1.19.11 (v1.19.0)

Tue, 13 Jan 2026 07:20:56 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.33.14-patch1.
- rancher/kubectl has been upgraded to v1.34.3.

v1.19.10 (v1.19.0)

Mon, 22 Dec 2025 20:40:40 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.11.

v1.19.9 (v1.19.0)

Fri, 05 Dec 2025 15:48:08 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.33.13-patch1.
Extra Notes
- *This release is building...*

v1.19.8 (v1.19.0)

Wed, 22 Oct 2025 15:19:51 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.33.12-patch1.
- golang/go has been upgraded to v1.24.9.
- solo-io/cloud-builders has been upgraded to v0.13.2.
Fixes
- Bump the alpine base container image to 3.21.5 (https://github.com/solo-io/solo-projects/issues/8620)
- Fixes a bug where the the default gatewayProxy when disabled would create invalid helm templates for custom proxies. (https://github.com/solo-io/solo-projects/issues/8613)

v1.19.7 (v1.19.0)

Thu, 25 Sep 2025 06:20:19 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.33.8-patch2.

v1.19.6 (v1.19.0)

Wed, 13 Aug 2025 15:15:19 GMT

Dependency Bumps
- bitnami/kubectl has been upgraded to v1.33.3.

v1.19.5 (v1.19.0)

Tue, 12 Aug 2025 20:08:57 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.6.
- solo-io/cloud-builders has been upgraded to v0.13.1.
- solo-io/go-utils has been upgraded to v0.28.6.
- bitnami/kubectl has been upgraded to v1.33.3.
Fixes
- Ensure that when one-way TLS is enabled, the upstream TLS context is configured correctly to validate the server certificate. (https://github.com/solo-io/solo-projects/issues/8499)

v1.19.4 (v1.19.0)

Thu, 17 Jul 2025 19:00:35 GMT

Dependency Bumps
- helm/helm has been upgraded to v3.18.4.

v1.19.3 (v1.19.0)

Thu, 10 Jul 2025 18:13:26 GMT

Fixes
- Expose ecdh-curves TLS settings for listeners (https://github.com/solo-io/solo-projects/issues/8456)

v1.19.2 (v1.19.0)

Wed, 18 Jun 2025 15:36:48 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.4.
Fixes
- For clusters generated for the dynamic forward proxy, the circuit breakers are now generated from the dfp config, if provided, otherwise from the settings. If the circuitBreakers are not provided in either location, envoy will use the default circuit breakers. (https://github.com/solo-io/solo-projects/issues/8094)
- Setting the `uuidRequestIdConfig` in the `HttpConnectionManagerSettings` now correctly sets the `RequestIdExtension` in the `HttpConnectionManager` filter.

v1.19.1 (v1.19.0)

Tue, 03 Jun 2025 17:40:38 GMT

Fixes
- [AI] proto file change to support url override in custom host (https://github.com/solo-io/solo-projects/issues/8305)
- Fix a bug in the gloo_solo_io_namespaces_watched metric that errors when the list of namespaces watched is large. (https://github.com/solo-io/solo-projects/issues/8319)

v1.19.0 (v1.19.0)

Wed, 14 May 2025 01:14:13 GMT

Extra Notes
- This release contained no user-facing changes.

v1.19.0-rc5 (v1.19.0)

Thu, 08 May 2025 20:50:01 GMT

v1.19.0-rc4 (v1.19.0)

Thu, 01 May 2025 15:08:53 GMT

Extra Notes
- This release contained no user-facing changes.

v1.19.0-rc3 (v1.19.0)

Tue, 29 Apr 2025 20:49:03 GMT

Fixes
- Fix a bug where the gloo pod crashes if the install and write namespace are different. (https://github.com/solo-io/solo-projects/issues/8183)

v1.19.0-rc2 (v1.19.0)

Mon, 28 Apr 2025 14:23:09 GMT

v1.19.0-rc1 (v1.19.0)

Thu, 17 Apr 2025 20:12:00 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.33.2-patch2.

v1.19.0-beta19 (v1.19.0)

Thu, 17 Apr 2025 16:35:12 GMT

Dependency Bumps
- istio.io/istio has been upgraded to v1.25.2.
- istio.io/client-go has been upgraded to v1.25.2.
- istio.io/api has been upgraded to v1.25.2.
- golang.org/x/crypto has been upgraded to v0.36.0.
- golang.org/x/sync has been upgraded to v0.12.0.
Fixes
- gateway2/delegation: check cyclic reference only for valid children
- Moves the cyclic reference check after ignoring unattached candidate
- Removes the self-reference check so that invalid references to self
- gateway2/delegation: ignore child routes with mismatched parentRef early
- After the refactor to decouple querying of routes from translation
- This change prunes the routes in the chain early on to avoid
- Testing done:
- "Fix tests to apply different resources based on whether the XListenerSet CRD is present" (https://github.com/solo-io/solo-projects/issues/7886)

v1.19.0-beta18 (v1.19.0)

Mon, 14 Apr 2025 14:13:41 GMT

Fixes
- Fixed a bug in route delegation where the `parentRefs` field on child HTTPRoutes were not being respected when parent matcher inheritance was enabled. (https://github.com/solo-io/solo-projects/issues/8163)
New Features
- This adds a cli command 'glooctl gateway-api convert' to convert Edge APIs to Gateway API. (https://github.com/solo-io/gloo/issues/10738)

v1.19.0-beta17 (v1.19.0)

Thu, 10 Apr 2025 21:54:27 GMT

Fixes
- Fixed a bug with VirtualHostOptions and RouteOptions status reports were not being merged correctly when they referenced multiple proxies. (https://github.com/solo-io/solo-projects/issues/7980)
New Features
- Allows a kubernetes gateway to have more than 64 listeners by implementing ListenerSets defined in https://gateway-api.sigs.k8s.io/geps/gep-1713. Listener Sets can define their own listeners and be mapped to a parent gateway via their parentRef. The kubernetes gateway will have the merged list of all listeners from itself and attached ListenerSets. This is an experimental feature and requires the `xlistenersets.gateway.networking.x-k8s.io` CRD to be present. (https://github.com/solo-io/solo-projects/issues/7886)

v1.19.0-beta16 (v1.19.0)

Thu, 03 Apr 2025 18:02:23 GMT

Dependency Bumps
- google.golang.org/protobuf has been upgraded to v1.36.6.
Fixes
- gateway2/delegation: use a wildcard namespace
- Namespace type in Gateway API must be a valid RFC 1123 DNS label,
- gateway2/status: use SetStatusCondition to prevent duplicate conditions
- Currently, we append() Conditions while building the status reports.
- Updated HTTP tunneling plugin to support HTTP CONNECT tunneling on all Upstreams, not just
- To address clusters having their own lifecycle that differs from listeners in
New Features
- Support multiple target refs in ListenerOptions, HttpListenerOptions, VirtualHostOptions, and RouteOptions. (https://github.com/solo-io/solo-projects/issues/7980)

v1.19.0-beta15 (v1.19.0)

Tue, 25 Mar 2025 13:46:33 GMT

Fixes
- gateway2/delegation: enable wildcard namespace for label selection
- Allows specifying a wildcard value when using the label selector
Helm Changes
- Adds the new helm value `global.image.disableDigest` to disable adding the container image's hash digest. Defaults to false (https://github.com/solo-io/gloo/issues/10690)
New Features
- This adds the ability to configure Gateway Pod Topology Spread Constraints via GatewayParams `spec.kube.podTemplate.topologySpreadConstraints`. This can also be managed via Helm specifying `kubeGateway.gatewayParameters.glooGateway.podTemplate.topologySpreadConstraints`. (https://github.com/solo-io/solo-projects/issues/6928)

v1.19.0-beta14 (v1.19.0)

Fri, 14 Mar 2025 20:41:47 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.33.0-patch2.
Fixes
- Previously, Gloo did not provide any means to determine whether a request to an AWS Lambda upstream was rate-limited. With this fix, if the AWS Lambda upstream responds to Gloo with a HTTP 429, Gloo will return an HTTP 500 response to the client and set the `x-envoygloo-lambda-statuscode` and `x-envoygloo-lambda-statusreason` headers. The `statuscode` header will be set to `429` to indicate the value received from the Lambda upstream, and the `statusreason` header will be set as described in the [Lambda documentation](https://docs.aws.amazon.com/lambda/latest/api/API_Invoke.html)). (https://github.com/kgateway-dev/kgateway/issues/10192)
- Improved HTTP tunneling documentation and added note about remote JWKS configuration using an upstream with `httpProxyHostname` requiring additional configuration. (https://github.com/solo-io/solo-projects/issues/7497)

v1.19.0-beta13 (v1.19.0)

Tue, 11 Mar 2025 19:40:36 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.1.
Fixes
- Bump the alpine base container image to 3.21.3 (https://github.com/solo-io/solo-projects/issues/7956)
- Discover the Gloo service using labels. In some environments, services must be renamed. This change allows the service to still be discovered when it's been renamed. In the event that multiple services in the namespace have the gloo=gloo label, an error will occur. (https://github.com/solo-io/solo-projects/issues/7646)
- Fixes a bug where the route ordering affects the deprecated aws requiretransform functionality. (https://github.com/solo-io/solo-projects/issues/7882)
New Features
- Add support for setting filter state from the grpc access log with the gatewayProxies.gatewayProxy.gatewaySettings.accessLoggingService.accessLog.grpcService.filterStateObjectsToLog helm value (https://github.com/solo-io/solo-projects/issues/7923)
- Adds support for http2 via the service port appProtocol spec (https://github.com/solo-io/solo-projects/issues/7824)

v1.19.0-beta12 (v1.19.0)

Mon, 24 Feb 2025 23:29:55 GMT

New Features
- Added optional `hostname` to the AI Upstream CustomHost setting to override SNI and host header value (https://github.com/solo-io/solo-projects/issues/7831)

v1.19.0-beta11 (v1.19.0)

Mon, 24 Feb 2025 17:24:00 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.0.
Fixes
- Remove `regex` field from ai options proto enum to avoid generated code conflicts with `REGEX` field (https://github.com/solo-io/solo-projects/issues/7875)
New Features
- "Add support for sig gateway's TLS Routes." (https://github.com/kgateway-dev/kgateway/issues/10074)
Extra Notes
- *This release build failed.*

v1.19.0-beta10 (v1.19.0)

Tue, 18 Feb 2025 22:44:34 GMT

Breaking Changes
- Bump dependencies to support Kubernetes 1.32 (https://github.com/solo-io/solo-projects/issues/7788)
Dependency Bumps
- k8s.io/api has been upgraded to v0.32.2.
- k8s.io/apiextensions-apiserver has been upgraded to v0.32.2.
- k8s.io/apimachinery has been upgraded to v0.32.2.
- k8s.io/client-go has been upgraded to v0.32.2.
- k8s.io/code-generator has been upgraded to v0.32.2.
- k8s.io/component-base has been upgraded to v0.32.2.
- k8s.io/kubectl has been upgraded to v0.32.2.
- sigs.k8s.io/controller-runtime has been upgraded to v0.20.1.
- onsi/gomega has been upgraded to v1.35.1.
- onsi/ginkgo has been upgraded to v2.21.0.
- go.uber.org/zap has been upgraded to v1.27.0.
- solo-io/go-utils has been upgraded to v0.27.4.
- solo-io/cloud-builders has been upgraded to v0.11.1.
- solo-io/skv2 has been upgraded to v0.42.0.
- solo-io/solo-kit has been upgraded to v0.37.0.

v1.19.0-beta9 (v1.19.0)

Mon, 17 Feb 2025 19:00:02 GMT

Dependency Bumps
- github.com/envoyproxy/go-control-plane/contrib has been upgraded to v1.32.5-0.20250207140015-90270e3c85fd.
- github.com/envoyproxy/go-control-plane/envoy has been upgraded to v1.32.5-0.20250211152746-ef139ef8ea6b.
- golang.org/x/crypto has been upgraded to v0.32.0.
- golang.org/x/tools has been upgraded to v0.29.0.
- google.golang.org/grpc has been upgraded to v1.70.0.
- google.golang.org/protobuf has been upgraded to v1.36.5.
- github.com/fsnotify/fsnotify has been upgraded to v1.8.0.
- k8s.io/api has been upgraded to v0.32.1.
- k8s.io/apiextensions-apiserver has been upgraded to v0.32.1.
- k8s.io/apimachinery has been upgraded to v0.32.1.
- k8s.io/apiserver has been upgraded to v0.32.1.
- k8s.io/cli-runtime has been upgraded to v0.32.1.
- k8s.io/client-go has been upgraded to v0.32.1.
- sigs.k8s.io/code-generator has been upgraded to v0.32.1.
- sigs.k8s.io/component-base has been upgraded to v0.32.1.
- sigs.k8s.io/component-helpers has been upgraded to v0.32.1.
- sigs.k8s.io/kubectl has been upgraded to v0.32.1.
- sigs.k8s.io/metrics has been upgraded to v0.32.1.
- sigs.k8s.io/controller-runtime has been upgraded to v0.20.1.
- onsi/ginkgo/v2 has been upgraded to v2.22.1.
- onsi/gomega has been upgraded to v1.36.2.

v1.19.0-beta8 (v1.19.0)

Fri, 14 Feb 2025 19:59:10 GMT

Fixes
- Added the ability to control if resource status metrics are no longer reported after deletion.
- Setting `.Values.gloo.clearStatusMetrics` to `true` will result in metrics

v1.19.0-beta7 (v1.19.0)

Wed, 12 Feb 2025 06:51:43 GMT

Breaking Changes
- The default configuration of Envoy will continue to trust internal addresses while in the future it will not trust them by default. If you have tooling such as probes on your private network which need to be treated as trusted (e.g. changing arbitrary x-envoy headers) please explicitly include those addresses or CIDR ranges into [internal_address_config](https://docs.solo.io/gloo-edge/latest/reference/api/github.com/solo-io/gloo/projects/gloo/api/v1/options/hcm/hcm.proto.sk/#internaladdressconfig). You can turn up or test the upcoming internal address defaults by setting runtime guard envoy.reloadable_features.explicit_internal_address_config to true.
Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.32.3-patch2.
Fixes
- Fixes the gateway params image to respect the fips and distroless variants specified by global.image.variant. This only applies to the kubernetes gateway proxy. (https://github.com/solo-io/gloo/issues/10602)

v1.19.0-beta6 (v1.19.0)

Fri, 07 Feb 2025 22:20:49 GMT

Dependency Bumps
- solo-io/solo-kit has been upgraded to v0.36.4.
Fixes
- Fixes a bug where we translate Gateways that do not belong to us. (https://github.com/solo-io/solo-projects/issues/7768)
- Pull in solo-kit fix to reduce log level of snapshot cache watches. (https://github.com/kgateway-dev/kgateway/issues/8626)

v1.19.0-beta5 (v1.19.0)

Thu, 30 Jan 2025 16:55:28 GMT

New Features
- Add support for xDS over mTLS for communication between the Gloo pod and the Kubernetes Gateway proxies. This can be enabled by setting the 'global.glooMtls.enabled' helm value to true. (https://github.com/solo-io/solo-projects/issues/6210)
- Add support for setting the authority field on gRPC requests made to OTEL Collectors during tracing.

v1.19.0-beta4 (v1.19.0)

Wed, 22 Jan 2025 17:31:17 GMT

Fixes
- When a workload has the label `security.istio.io/tlsMode: disabled`

v1.19.0-beta3 (v1.19.0)

Wed, 15 Jan 2025 18:44:10 GMT

Dependency Bumps
- golang.org/crypto has been upgraded to v0.31.0.
- solo-io/envoy-gloo has been upgraded to v1.31.5-patch1.
- golang.org/x/net has been upgraded to v0.33.0.
Fixes
- Export IsGatewayInstalled for use in other packages (https://github.com/solo-io/solo-projects/issues/7432)
- Fixes an issue where the ai semantic caching distance is not being set correctly in the cache. Also move the distance threshold to the cache configuration, rather than per datastore. (https://github.com/solo-io/solo-projects/issues/7440)
- Fixes an issue where an error is thrown instead of an InvalidDestinationWarning when a tracing collector references a missing upstream. (https://github.com/k8sgateway/k8sgateway/issues/10293)
- gateway2/delegation: enable inherited policy overrides
- Adds the ability to override inherited policy fields when
- Functionally, a child RouteOption may only override the RouteOptions
- Testing done:
- Translator tests for the new scenarios. (https://github.com/solo-io/solo-projects/issues/7315)
- Route delegation makes use of delegation.gateway.solo.io/*
- Add `PERSIST_INSTALL` environment variable to control Gloo installation while running e2e tests (both new and old versions). If set to `true`, the the installation of Gloo will be skipped if it is already installed, and will install Gloo if not already installed. When set to `true`, teardown will also be skipped.
- Fix a memory leaking a log name. (https://github.com/solo-io/solo-projects/issues/7573)
- When merging parent-child policies, the merging should allow child
Helm Changes
- Adds support for match conditions (defined via Common Expression Language (CEL)) to the validating webhook to allow fine grained request filtering. They can be set via two new helm values : - `gateway.validation.matchConditions` on the Gloo webhook - `gateway.validation.kubeCoreMatchConditions` on the Kube webhook Note that match labels are supported from Kubernetes v1.30+ but need to be enabled in Kubernetes v1.27 to v1.30 via the AdmissionWebhookMatchConditions feature gate. (https://github.com/k8sgateway/k8sgateway/issues/9828)
New Features
- Add a new Ports field to the `GatewayParameters` `Kube.Service` Spec in order to allow admin users to configure additional information about the ports that the Gateway should listen on. This is useful if the user wants to specify a static `NodePort`. (https://github.com/solo-io/solo-projects/issues/7504)
- Add new SSL options to GatewayTLSConfig to enable configuring additional SSL options which were previously available using the edge API. This includes cipher suites, minimum TLS version, maximum TLS version, client certificate validation, and one way TLS. (https://github.com/solo-io/solo-projects/issues/7505)
- gateway2: allow route delegation using wellknown label
- There is a product requirement to enable users to use
- To strike a balance between flexibility and performance,
- Add ability to configure proxy service External Traffic Policy via Gateway Params (https://github.com/k8sgateway/k8sgateway/issues/9879)

v1.19.0-beta2 (v1.19.0)

Wed, 11 Dec 2024 12:26:12 GMT

Fixes
- Bumps Gateway API dependencies from v1.2.0 to v1.2.1. (https://github.com/solo-io/gloo/issues/10456)
- When the v1 DestinationRule CRD does not exist, don't attemp to read DestinationRule. (https://github.com/solo-io/solo-projects/issues/7400)
New Features
- Adds a new top level `glooctl debug` CLI command as well as subcommands which collect kubernetes, gloo controller, and envoy state information to aid in debugging failures. (https://github.com/solo-io/solo-projects/issues/7298)
- Add API for AI related tracing operations, as well as general QOL tracing updates for Gateway API. (https://github.com/solo-io/solo-projects/issues/7295)

v1.19.0-beta1 (v1.19.0)

Fri, 06 Dec 2024 12:58:15 GMT

Breaking Changes
- When using the Kubernetes Gateway API and routing to Kubernetes Services or Kubernetes Upstreams, the envoy cluster stats names are now in a new more parseable format that allows us to extract info about the Service: `upstreamName_upstreamNs_svcNs_svcName_svcPort` (underscore-separated). Note that as long as Kubernetes Gateway integration is enabled (i.e. Gloo Gateway is installed with `kubeGateway.enabled=true`), both Edge and Kubernetes Gateway proxies will use the new stats name format for these clusters. (https://github.com/solo-io/solo-projects/issues/7105)
Dependency Bumps
- moby/moby has been upgraded to v26.0.0.
Fixes
- Adds tests for TCPRoute ReferenceGrant support to ensure cross namespace references. (https://github.com/solo-io/solo-projects/issues/7309)
- Increases the assertion timeout for TCPRoute e2e test cases. (https://github.com/solo-io/gloo/issues/10434)

v1.18.41 (v1.18.0)

Wed, 05 Aug 2026 16:03:12 GMT

v1.18.40 (v1.18.0)

Fri, 26 Jun 2026 16:39:49 GMT

Extra Notes
- This release contained no user-facing changes.

v1.18.39 (v1.18.0)

Wed, 24 Jun 2026 22:05:50 GMT

v1.18.38 (v1.18.0)

Fri, 22 May 2026 22:18:02 GMT

Dependency Bumps
- alpine/alpine has been upgraded to 3.23.4.
Fixes
- Update certgen dependency versions for security fixes. (https://github.com/solo-io/gloo/issues/9034)

v1.18.36 (v1.18.0)

Mon, 27 Apr 2026 21:15:15 GMT

Extra Notes
- This release contained no user-facing changes.

v1.18.35 (v1.18.0)

Thu, 16 Apr 2026 23:02:20 GMT

v1.18.34 (v1.18.0)

Wed, 11 Mar 2026 14:39:18 GMT

v1.18.33 (v1.18.0)

Wed, 04 Mar 2026 16:16:07 GMT

v1.18.32 (v1.18.0)

Tue, 13 Jan 2026 02:33:58 GMT

Dependency Bumps
- rancher/kubectl has been upgraded to v1.34.3.

v1.18.31 (v1.18.0)

Mon, 22 Dec 2025 19:43:22 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.11.

v1.18.30 (v1.18.0)

Wed, 22 Oct 2025 19:05:49 GMT

Extra Notes
- This release contained no user-facing changes.

v1.18.29 (v1.18.0)

Wed, 22 Oct 2025 02:05:52 GMT

Extra Notes
- [1.18] Weekly doc fixes by @Rachael-Graham in https://github.com/solo-io/gloo/pull/11013
- link fixes 1.18 by @Nadine2016 in https://github.com/solo-io/gloo/pull/11017
- [v1.18.x] fix: Removed "-" to avoid left hand trimming issue (#11038) by @puertomontt in https://github.com/solo-io/gloo/pull/11048

v1.18.28 (v1.18.0)

Thu, 25 Sep 2025 06:19:50 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.31.10-patch2.

v1.18.27 (v1.18.0)

Wed, 13 Aug 2025 17:34:19 GMT

Dependency Bumps
- bitnami/kubectl has been upgraded to v1.33.3.
- golang/go has been upgraded to v1.24.6.
- solo-io/cloud-builders has been upgraded to v0.13.1.
- bitnami/kubectl has been upgraded to v1.33.3.
Fixes
- Ensure that when one-way TLS is enabled, the upstream TLS context is configured correctly to validate the server certificate. (https://github.com/solo-io/solo-projects/issues/8499)

v1.18.26 (v1.18.0)

Fri, 11 Jul 2025 17:10:40 GMT

Fixes
- Fixed pr workflow to run TestK8sGateway/ServerTls test and disable the pq-tls for now (see comment in test) (https://github.com/solo-io/solo-projects/issues/8456)

v1.18.25 (v1.18.0)

Thu, 10 Jul 2025 15:41:24 GMT

Fixes
- Expose ecdh-curves TLS settings for listeners (https://github.com/solo-io/solo-projects/issues/8456)

v1.18.24 (v1.18.0)

Thu, 10 Jul 2025 00:22:26 GMT

Dependency Bumps
- helm.sh/helm has been upgraded to v3.18.4.

v1.18.23 (v1.18.0)

Mon, 07 Jul 2025 16:47:50 GMT

v1.18.22 (v1.18.0)

Tue, 17 Jun 2025 23:09:13 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.4.

v1.18.21 (v1.18.0)

Mon, 09 Jun 2025 16:07:29 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.1.
Fixes
- Setting the `uuidRequestIdConfig` in the `HttpConnectionManagerSettings` now correctly sets the `RequestIdExtension` in the `HttpConnectionManager` filter.

v1.18.20 (v1.18.0)

Fri, 30 May 2025 21:45:06 GMT

Fixes
- Fix a bug in the gloo_solo_io_namespaces_watched metric that errors when the list of namespaces watched is large. (https://github.com/solo-io/solo-projects/issues/8319)

v1.18.19 (v1.18.0)

Thu, 22 May 2025 16:01:16 GMT

v1.18.18 (v1.18.0)

Fri, 09 May 2025 18:11:22 GMT

Fixes
- Fix a bug where the gloo pod crashes if the install and write namespace are different. (https://github.com/solo-io/solo-projects/issues/8183)

v1.18.17 (v1.18.0)

Mon, 28 Apr 2025 16:02:15 GMT

Dependency Bumps
- golang.org/crypto has been upgraded to v0.35.0.
Fixes
- Add support for setting the authority field on gRPC requests made to OTEL Collectors during tracing.

v1.18.16 (v1.18.0)

Tue, 15 Apr 2025 19:55:08 GMT

Fixes
- gateway2/delegation: check cyclic reference only for valid children
- Moves the cyclic reference check after ignoring unattached candidate
- Removes the self-reference check so that invalid references to self

v1.18.15 (v1.18.0)

Tue, 15 Apr 2025 15:55:00 GMT

Fixes
- gateway2/delegation: ignore child routes with mismatched parentRef early
- After the refactor to decouple querying of routes from translation
- This change prunes the routes in the chain early on to avoid
- Testing done:

v1.18.14 (v1.18.0)

Fri, 11 Apr 2025 20:48:12 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.31.6-patch1.
Fixes
- gateway2/delegation: enable wildcard namespace for label selection
- Allows specifying a wildcard value when using the label selector
- gateway2/delegation: use a wildcard namespace
- Namespace type in Gateway API must be a valid RFC 1123 DNS label,
- Fixed a bug in route delegation where the `parentRefs` field on child HTTPRoutes were not being respected when parent matcher inheritance was enabled. (https://github.com/solo-io/solo-projects/issues/8163)
- gateway2/status: use SetStatusCondition to prevent duplicate conditions
- Currently, we append() Conditions while building the status reports.

v1.18.13 (v1.18.0)

Wed, 12 Mar 2025 16:00:14 GMT

Fixes
- Bump the alpine base container image to 3.21.3 (https://github.com/solo-io/solo-projects/issues/7956)
- Add support for setting filter state from the grpc access log with the gatewayProxies.gatewayProxy.gatewaySettings.accessLoggingService.accessLog.grpcService.filterStateObjectsToLog helm value (https://github.com/solo-io/solo-projects/issues/7923)

v1.18.12 (v1.18.0)

Thu, 06 Mar 2025 18:04:46 GMT

Dependency Bumps
- golang/go has been upgraded to v1.23.7.
Fixes
- Discover the Gloo service using labels. In some environments, services must be renamed. This change allows the service to still be discovered when it's been renamed. In the event that multiple services in the namespace have the gloo=gloo label, an error will occur. (https://github.com/solo-io/solo-projects/issues/7646)

v1.18.11 (v1.18.0)

Mon, 03 Mar 2025 15:42:05 GMT

Extra Notes
- This release contained no user-facing changes.

v1.18.10 (v1.18.0)

Tue, 25 Feb 2025 19:22:56 GMT

Fixes
- Fixes an issue where the ai semantic caching distance is not being set correctly in the cache. Also move the distance threshold to the cache configuration, rather than per datastore. (https://github.com/solo-io/solo-projects/issues/7440)
- Added optional `hostname` to the AI Upstream CustomHost setting to override SNI and host header value (https://github.com/solo-io/solo-projects/issues/7831)
- Fixes a bug where the route ordering affects the deprecated aws requiretransform functionality. (https://github.com/solo-io/solo-projects/issues/7882)

v1.18.9 (v1.18.0)

Thu, 20 Feb 2025 15:33:41 GMT

Fixes
- Remove `regex` field from ai options proto enum to avoid generated code conflicts with `REGEX` field (https://github.com/solo-io/solo-projects/issues/7875)

v1.18.8 (v1.18.0)

Mon, 17 Feb 2025 21:07:06 GMT

Extra Notes
- This release contained no user-facing changes.

v1.18.7 (v1.18.0)

Tue, 11 Feb 2025 19:19:49 GMT

Dependency Bumps
- solo-io/solo-kit has been upgraded to v0.36.4.
Fixes
- Fixes a bug where we translate Gateways that do not belong to us. (https://github.com/solo-io/solo-projects/issues/7768)
- Fixes the gateway params image to respect the fips and distroless variants specified by global.image.variant. This only applies to the kubernetes gateway proxy. (https://github.com/solo-io/gloo/issues/10602)
- Add support for xDS over mTLS for communication between the Gloo pod and the Kubernetes Gateway proxies. This can be enabled by setting the 'global.glooMtls.enabled' helm value to true. (https://github.com/solo-io/solo-projects/issues/6210)
- Pull in solo-kit fix to reduce log level of snapshot cache watches. (https://github.com/kgateway-dev/kgateway/issues/8626)

v1.18.6 (v1.18.0)

Tue, 14 Jan 2025 16:09:45 GMT

Helm Changes
- Adds support for match conditions (defined via Common Expression Language (CEL)) to the validating webhook to allow fine grained request filtering. They can be set via two new helm values : - `gateway.validation.matchConditions` on the Gloo webhook - `gateway.validation.kubeCoreMatchConditions` on the Kube webhook Note that match labels are supported from Kubernetes v1.30+ but need to be enabled in Kubernetes v1.27 to v1.30 via the AdmissionWebhookMatchConditions feature gate. (https://github.com/k8sgateway/k8sgateway/issues/9828)

v1.18.5 (v1.18.0)

Mon, 13 Jan 2025 18:42:20 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.31.5-patch2.

v1.18.4 (v1.18.0)

Fri, 10 Jan 2025 22:38:28 GMT

Fixes
- Expose spawn_upstream_span on the tracing API. This setting tells envoy to spawn a new span for each upstream request. (https://github.com/solo-io/solo-projects/issues/6748)
- Add a new Ports field to the `GatewayParameters` `Kube.Service` Spec in order to allow admin users to configure additional information about the ports that the Gateway should listen on. This is useful if the user wants to specify a static `NodePort` (https://github.com/solo-io/solo-projects/issues/7504)
- Add new SSL options to GatewayTLSConfig to enable configuring additional SSL options which were previously available using the edge API. This includes cipher suites, minimum TLS version, maximum TLS version, client certificate validation, and one way TLS. (https://github.com/solo-io/solo-projects/issues/7505)
- gateway2: allow route delegation using wellknown label
- There is a product requirement to enable users to use
- To strike a balance between flexibility and performance,
- Add ability to configure proxy service External Traffic Policy via Gateway Params (https://github.com/k8sgateway/k8sgateway/issues/9879)
- Bumps Gateway API dependencies from v1.2.0 to v1.2.1. (https://github.com/solo-io/gloo/issues/10546)
- When merging parent-child policies, the merging should allow child

v1.18.3 (v1.18.0)

Thu, 02 Jan 2025 18:38:25 GMT

Fixes
- Fix a memory leaking a log name. (https://github.com/solo-io/solo-projects/issues/7573)

v1.18.2 (v1.18.0)

Fri, 20 Dec 2024 14:14:47 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.31.5-patch1.
Fixes
- Route delegation makes use of delegation.gateway.solo.io/*

v1.18.1 (v1.18.0)

Thu, 19 Dec 2024 16:06:50 GMT

Dependency Bumps
- golang.org/crypto has been upgraded to v0.31.0.
- golang.org/x/net has been upgraded to v0.33.0.
Fixes
- Fixes an issue where an error is thrown instead of an InvalidDestinationWarning when a tracing collector references a missing upstream. (https://github.com/k8sgateway/k8sgateway/issues/10293)
- gateway2/delegation: enable inherited policy overrides
- Adds the ability to override inherited policy fields when
- Functionally, a child RouteOption may only override the RouteOptions
- Testing done:
- Translator tests for the new scenarios. (https://github.com/solo-io/solo-projects/issues/7315)

v1.18.0 (v1.18.0)

Thu, 12 Dec 2024 14:53:30 GMT

Extra Notes
- This release contained no user-facing changes.

v1.18.0-rc5 (v1.18.0)

Tue, 10 Dec 2024 21:38:14 GMT

Fixes
- When the v1 DestinationRule CRD does not exist, don't attemp to read DestinationRule. (https://github.com/solo-io/solo-projects/issues/7400)

v1.18.0-rc4 (v1.18.0)

Fri, 06 Dec 2024 15:09:02 GMT

Dependency Bumps
- moby/moby has been upgraded to v26.0.0.
Fixes
- When using the Kubernetes Gateway API and routing to Kubernetes Services or Kubernetes Upstreams, the envoy cluster stats names are now in a new more parseable format that allows us to extract info about the Service: `upstreamName_upstreamNs_svcNs_svcName_svcPort` (underscore-separated). Note that as long as Kubernetes Gateway integration is enabled (i.e. Gloo Gateway is installed with `kubeGateway.enabled=true`), both Edge and Kubernetes Gateway proxies will use the new stats name format for these clusters. (https://github.com/solo-io/solo-projects/issues/7105)
- Adds tests for TCPRoute ReferenceGrant support to ensure cross namespace references. (https://github.com/solo-io/solo-projects/issues/7309)
- Increases the assertion timeout for TCPRoute e2e test cases. (https://github.com/solo-io/gloo/issues/10434)

v1.18.0-rc3 (v1.18.0)

Mon, 02 Dec 2024 20:44:18 GMT

Fixes
- There's a bug in how cycles are detected when evaluating a
- Refactors TCPRoute e2e tests to run in parallel, reduce flakes, and parameterize tests for reusability. (https://github.com/solo-io/gloo/issues/10414)
- Changes endpointslice logging level to debug for transformK8sEndpoints() function. (https://github.com/solo-io/solo-projects/issues/7286)
- Fix the validation of large configurations when using envoy validation. This was rarely seen in practice but occurred more often with the new fullEnvoyConfig validation. Previously if the configuration grew too large translation would be blocked. (https://github.com/solo-io/solo-projects/issues/7089)

v1.18.0-rc2 (v1.18.0)

Mon, 25 Nov 2024 17:12:09 GMT

Breaking Changes
- Upstreams and UpstreamGroups no longer get Accepted status by default. If they have not gone through translation they will have an empty status field. (https://github.com/solo-io/gloo/issues/10401)
Dependency Bumps
- solo-io/solo-kit has been upgraded to v0.36.3.
Fixes
- Bump the timeout for the nightly e2e tests (https://github.com/solo-io/gloo/issues/10380)
- Adds support for setting TCPRoute status and managing status conditions. (https://github.com/k8sgateway/k8sgateway/issues/10365)

v1.18.0-rc1 (v1.18.0)

Tue, 19 Nov 2024 00:07:08 GMT

Dependency Bumps
- solo-io/solo-kit has been upgraded to v0.36.2.
Fixes
- Bump the kubectl image from 1.29.6 to to 1.31.1 to address CVE-2023-45288. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19119)
- The GraphQL feature of Gloo Gateway is deprecated and will be removed in a future release (https://github.com/solo-io/solo-projects/issues/7159)
- Remove docs for external APIs (https://github.com/solo-io/solo-projects/issues/6768)
Helm Changes
- Adds the following new fields that configure the Kubernetes Gloo Gateway pod :
New Features
- Adds a common category to all Gloo Gateway CRDs. `kubectl get gloo-gateway -A` can now be used to list all GG CRs on your cluster. Also adds the "solo-io" category to GG enterprise CRDs. (https://github.com/solo-io/solo-projects/issues/6605)
- Adds the ability for users to enable as well as add custom readiness and liveness probes to the Kubernetes Gloo Gateway. (https://github.com/solo-io/solo-projects/issues/7084)
- Add API for configuring authentication for APIs managed by Gloo Portal. (https://github.com/solo-io/solo-projects/issues/7170)

v1.18.0-beta34 (v1.18.0)

Wed, 13 Nov 2024 00:33:43 GMT

Dependency Bumps
- golang/go has been upgraded to v1.23.3.
- solo-io/envoy-gloo has been upgraded to 1.31.2-patch3.
- solo-io/k8s-utils has been upgraded to v0.8.1.
Fixes
- Fix issue where Gloo Gateway did not respect the cluster domain for the xds host address. (https://github.com/solo-io/gloo/issues/10268)
- Adds basic support for Gateway API TCPRoute. (https://github.com/solo-io/gloo/issues/10073)
- Makes the Gateway API TCPRoute controller optional. (https://github.com/solo-io/gloo/issues/10304)
- Removes the endpoints resource from Helm RBAC manifest when kubeGateway is enabled. (https://github.com/solo-io/gloo/issues/10323)
- Updates the gateway2 project to use EndpointSlice instead of Endpoints for creating upstream endpoints. (https://github.com/solo-io/solo-projects/issues/6910)
New Features
- Add `glooctl proxy snapshot` command, which can be pointed at a Gloo Gateway instance and will produce a zip archive containing all Envoy state, for the purposes of simplified issue reporting and triage. (https://github.com/solo-io/solo-projects/issues/7131)
- Add `listenerTcpStats: true|false` to the ListenerOptions API. If `true` will enable [Envoy TCP](https://www.envoyproxy.io/docs/envoy/latest/configuration/listeners/stats#tcp-statistics) stats collection for all listeners. This can be useful for L4 debugging. (https://github.com/solo-io/solo-projects/issues/7176)
- Added support for early header manipulation on Gateways. This feature allows headers to be manipulated before significant processing and routing decisions. It affords the ability to add or remove headers that affect request processing and can be used to implement override headers. This can be configured by setting the `gateway.spec.httpGateway.options.httpConnectionManagerSettings.earlyHeaderMutation` field. The headersToAdd field will add key-value pair headers to the request if not already present or overwrite them unless append is set to true. The headersToRemove field removes the specified headers and is processed after the headers have been added. (https://github.com/solo-io/gloo/issues/9604)
- Support exportTo for Istio's DestinationRule. (https://github.com/solo-io/solo-projects/issues/7101)
- Enable modifying the span name for tracing purposes using InjaTemplates in the transformation filter. More information on OpenTelemetry span names can be found here: https://opentelemetry.io/docs/specs/semconv/http/http-spans/ (https://github.com/solo-io/gloo/issues/9848)
- Split the validating webhook to allow different failure policies for gloo/non-gloo resources. The split out webhook for kubernetes resources shares all configuration with the existing webhook except for the failure policy, which can be set with `gateway.validation.kubeCoreFailurePolicy` (https://github.com/solo-io/gloo/issues/10247)

v1.18.0-beta33 (v1.18.0)

Wed, 06 Nov 2024 18:11:22 GMT

New Features
- Support port level settings for lb and outlier detection in Istio's DestinationRule. (https://github.com/solo-io/solo-projects/issues/7101)

v1.18.0-beta32 (v1.18.0)

Tue, 05 Nov 2024 19:31:08 GMT

New Features
- Adds new Portal enablement helm value to simplify enabling the Developer Portal in Gloo Gateway. (`gloo.kubeGateway.portal.enabled`) (https://github.com/solo-io/solo-projects/issues/6470)
- Initial support for Istio's DestinationRule resource for purposes of failover. (https://github.com/solo-io/gloo/pull/10251)

v1.18.0-beta31 (v1.18.0)

Fri, 01 Nov 2024 18:29:14 GMT

Fixes
- Fix `glooctl check` so that it only checks Proxies in the write namespace (where all proxies are written), instead of checking in each of the watch namespaces. (https://github.com/solo-io/gloo/issues/9935)
Helm Changes
- Expose new Helm values `kubeGateway.gatewayParameters.glooGateway.service.extraLabels` and `kubeGateway.gatewayParameters.glooGateway.service.extraAnnotations` to set extra labels and extra annotations on the default GatewayParameters. (https://github.com/solo-io/solo-projects/issues/7090)
New Features
- Add an API to allow configuring `CHAT_STREAMING` to support Gemini streaming API. (hhttps://github.com/solo-io/solo-projects/issues/7030)
- Add API to enable passthrough auth strategy for AI services. This allows users to pass through the token to the AI service, rather than requiring them to supply a seprate token for the AI service. This can be useful if Identity federation has already been done for the backend in question (https://github.com/solo-io/solo-projects/issues/7115)
- Add API to add moderation as a possible Prompt Guard step. This allows users to add run the user prompt through a moderation service before sending it to the backend LLM. (https://github.com/solo-io/solo-projects/issues/7070)
- The existing Helm values `settings.aws.enableServiceAccountCredentials` and `settings.aws.stsCredentialsRegion` are now respected when using Kubernetes Gateway API, as part of supporting [AWS Lambda with EKS ServiceAccounts](https://docs.solo.io/gloo-edge/latest/guides/traffic_management/destination_types/aws_lambda/eks-service-accounts/). When `settings.aws.enableServiceAccountCredentials` is true, a `aws_sts_cluster` cluster, configured with the STS endpoint specified by `settings.aws.stsCredentialsRegion`, will automatically be added to dynamically provisioned proxies, so that Envoy can reach AWS to assume the role needed to access Lambdas. (https://github.com/solo-io/solo-projects/issues/6847)

v1.18.0-beta30 (v1.18.0)

Tue, 29 Oct 2024 02:44:42 GMT

Fixes
- Fixes a bug where gloo segfaults if resources are applied to a unwatched namespace. (https://github.com/solo-io/solo-projects/issues/7082)
New Features
- Expose `close_connections_on_host_set_change` on `LoadBalancerConfig`. Setting this value configures the Envoy LB policy to drain connections when the upstream host set changes. This is useful when using Ring Hash or Maglev load balancing policies and helps ensure rebalancing when recovering from disruptions. Connections are not immediately closed and are allowed to drain. This feature is disabled by default. (https://github.com/solo-io/gloo/issues/9505) (https://github.com/solo-io/gloo/issues/9505)

v1.18.0-beta29 (v1.18.0)

Fri, 25 Oct 2024 16:28:36 GMT

Extra Notes
- This release contained no user-facing changes.

v1.18.0-beta28 (v1.18.0)

Tue, 22 Oct 2024 16:12:32 GMT

Extra Notes
- This release contained no user-facing changes.

v1.18.0-beta27 (v1.18.0)

Fri, 11 Oct 2024 21:14:38 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to 1.31.2-patch1.
New Features
- Add an API to allow configuring Gemini as AI upstream. (hhttps://github.com/solo-io/solo-projects/issues/7030)
- Add the initial API for the AI Prompt Guard Webhook. (https://github.com/solo-io/solo-projects/issues/6983)
- Updated the datadog tracer config proto to match envoy v1.31. New fields include `collector_hostname` and `remote_config`. Remote config can now be configured or disabled completely. (https://github.com/solo-io/gloo/issues/10145)

v1.18.0-beta26 (v1.18.0)

Thu, 10 Oct 2024 18:01:22 GMT

Fixes
- Previously, the controller would only watch Gateway objects for generation field changes which is not updated when annotations change. Since Gateway reconciliation should be triggered when the gateway.gloo.solo.io/gateway-parameters-name annotation is added, removed, or modified, the predicate was updated to check for changes in either the generation field or the annotations. (https://github.com/solo-io/gloo/issues/10099)

v1.18.0-beta25 (v1.18.0)

Fri, 04 Oct 2024 20:15:21 GMT

Fixes
- Updates the Gateway API CRDs to from v1.0.0-rc1 to v1.0.0. (https://github.com/solo-io/gloo/issues/10115)
- Changes to downgrade the level of strictness added in 1.17.8 for TLS secret validation. We still validate several pieces of the cert but also scrub down to usable bits. This means we avoid envoy nacks while allowing more non-useful or functional info in our TLS secrets. This means we are RFC compliant but it may mean that there could exist some cert data in an edge case which we will elide from envoy but previously would be nacked. (https://github.com/solo-io/solo-projects/issues/6772)
Helm Changes
- Add value to enable full Envoy validation after translation. This functionality is disabled by default but can be enabled with gateway.validation.fullEnvoyValidation=true. (https://github.com/solo-io/gloo/issues/5720)
New Features
- Adds feature to utilize Envoy's validate mode to validate all config during translation. This will be helpful in catching issues which Gloo translation cannot or otherwise does not view as errors before the config gets served to Envoy. (https://github.com/solo-io/gloo/issues/5720)

v1.18.0-beta24 (v1.18.0)

Tue, 01 Oct 2024 15:10:22 GMT

Dependency Bumps
- sigs.k8s.io/gateway-api has been upgraded to v1.1.0.
- solo-io/solo-kit has been upgraded to v0.36.1.
Fixes
- Fix a bug that caused discovered Upstreams to not reflect the updated state of parent Services discovered using watchLabels (https://github.com/solo-io/gloo/issues/8635)
Helm Changes
- Adds a new helm value `settings.watchNamespaceSelectors`. This allows users to specify namespaces to watch based on label selectors that can be specified via `settings.watchNamespaceSelectors.matchLabels` for an exact label match and `settings.watchNamespaceSelectors.matchExpressions` for more generic requirements. The `settings.watchNamespaces` field will override this if specified. (https://github.com/solo-io/gloo/issues/9274)
New Features
- When using the Kubernetes Gateway API, the provisioned ServiceAccount's labels and annotations are now configurable via the GatewayParameters fields `spec.kube.serviceAccount.extraLabels` and `spec.kube.serviceAccount.extraAnnotations`. These values can also be set on the default GatewayParameters during install/upgrade using the Helm values `kubeGateway.gatewayParameters.glooGateway.serviceAccount.extraLabels` and `kubeGateway.gatewayParameters.glooGateway.serviceAccount.extraAnnotations`. (https://github.com/solo-io/solo-projects/issues/6846)
- Adds a new field `watchNamespaceSelectors` to the settings CR. This allows users to specify namespaces to watch based on label selectors. The `watchNamespaces` field will override this if specified. (https://github.com/solo-io/gloo/issues/9274)

v1.18.0-beta23 (v1.18.0)

Thu, 26 Sep 2024 17:03:54 GMT

Dependency Bumps
- solo-io/cloud-builders has been upgraded to 0.10.1.
- golang/go has been upgraded to go1.23.1.
- solo-io/go-utils has been upgraded to 0.27.0.
Helm Changes
- Automatically set the GOMAXPROCS environment variable in the gloo and discovery pods when CPU resource limits are set (via the `resources.limits.cpu` deployment helm value). Automatically set the GOMEMLIMIT environment variable in the gloo and discovery pods when memory resource limits are set (via the `resources.limits.memory` deployment helm value). These may help limit CPU/memory usage when resource limits are set on the pods. (https://github.com/solo-io/gloo/issues/10062)
New Features
- Add an API to allow configuring prioritized pools of LLM backends. (https://github.com/solo-io/solo-projects/issues/6957)
- Add an API to allow configuring Weaviate as a backend for semantic caching. (https://github.com/solo-io/solo-projects/issues/6919)

v1.18.0-beta22 (v1.18.0)

Tue, 17 Sep 2024 21:16:03 GMT

Dependency Bumps
- solo-io/cloud-builders has been upgraded to 0.10.1.
- golang/go has been upgraded to go1.23.1.
Fixes
- Increase timeout/retries for glooctl check when connecting to the gateway using port forwarding. (https://github.com/solo-io/gloo/issues/10020)
- Fixes an issue on upgrades to 1.17+ where persistproxyspec was set to true. Persist proxy spec is configured in helm via gateway.persistProxySpec or in ee gloo.gateway.persistProxySpec (https://github.com/solo-io/gloo/issues/9968)
- Plugs a gap where go would check a secret for validity per spec but Envoy is more aggressive. For example a TLS secret with a certChain that contains an invalid PEM block will be rejected by Envoy but not Go. Prior to this PR these types of secrets would be accepted by Gloo and nacked by Envoy. (https://github.com/solo-io/solo-projects/issues/6772)
New Features
- Add an API to allow configuring additional labels for AI request stats. (https://github.com/solo-io/solo-projects/issues/6895)

v1.18.0-beta21 (v1.18.0)

Wed, 11 Sep 2024 18:15:29 GMT

Dependency Bumps
- solo-io/cloud-builders has been upgraded to 0.9.3.
- solo-io/cloud-builders has been upgraded to 0.9.3.
- solo-io/cloud-builders has been upgraded to 0.9.3.
- solo-io/cloud-builders has been upgraded to 0.9.3.
- golang/go has been upgraded to go1.22.7.
New Features
- Adds new `validationPolicy` option for JWT configuration to allow configuring `ALLOW_MISSING` if token is missing, request is still accepted. The existing API flag `allow_missing_or_failed` is not sufficient for this use case. (https://github.com/solo-io/gloo/issues/8728)
- Add API support for Azure OpenAI Token based auth with the AI Gateway. (https://github.com/solo-io/solo-projects/issues/6856)
- Introduce a new DirectResponse v1alpha1 API to allow users to configure direct response routes with the Kubernetes Gateway API integration. Now, users can configure a direct response action for an HTTPRoute via an extensionRef filter to this new API. (https://github.com/solo-io/gloo/issues/9774)
- Expose max_buffered_{rx/tx}_bytes, record_headers_received_time and record_downstream_connection settings for the Tap filter config. (https://github.com/solo-io/gloo/issues/9656)

v1.18.0-beta20 (v1.18.0)

Thu, 05 Sep 2024 15:20:44 GMT

Extra Notes
- This release contained no user-facing changes.

v1.18.0-beta19 (v1.18.0)

Tue, 03 Sep 2024 13:52:52 GMT

New Features
- Added support for route level JWT configuration by introducing new `jwtProvidersStaged` field on the RouteOptions. (https://github.com/solo-io/solo-projects/issues/6541)

v1.18.0-beta18 (v1.18.0)

Thu, 29 Aug 2024 21:08:31 GMT

Fixes
- Give each test summary artifact a unique name and refactor summary code into reusable package (https://github.com/solo-io/solo-projects/issues/6646)
Helm Changes
- helm/gloo: introduce component label for grouping resources
- Introduces a `gloo.solo.io/component` label to group Helm resources

v1.18.0-beta17 (v1.18.0)

Mon, 26 Aug 2024 20:32:10 GMT

Fixes
- Don't multiply custom filters by plugins. (https://github.com/solo-io/gloo/issues/9915)
- Fix a bug where an empty GWP seg faults. (https://github.com/solo-io/gloo/pull/9922)
New Features
- Add new API fields to AI Semantic Caching API.
- Mode field to control whether the proxy will cache responses, or only read.
- scoreThreshold field to control the minimum similarity score required for a cached response to be used. (https://github.com/solo-io/solo-projects/issues/6783)

v1.18.0-beta16 (v1.18.0)

Wed, 21 Aug 2024 18:41:48 GMT

Breaking Changes
- Fix for issue where a missing TLS secret was treated by validation as an error, potentially bringing down the entire HTTPS gateway if the gloo pod restarts while in this bad state. This is a breaking change in the default behavior of validation.
Fixes
- Set the 'message' field on various HTTPRoute conditions to enable easier troubleshooting (https://github.com/solo-io/gloo/issues/9859)
- Support defining the PriorityClassName on a GatewayProxy deployment. This allows users to attach pods to PriorityClasses (https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/) (https://github.com/solo-io/gloo/issues/9010)
Helm Changes
- Ensure that gateway-proxy deployments respect the `gatewayProxy.NAME.kind.deployment.priorityClassName` field. This API allows you to set the PriorityClassName for gateway-proxy Pods. This is already supported on all other Gloo deployments. (https://github.com/solo-io/gloo/issues/8677)
- New field gateway.validation.warnMissingTlsSecret controls whether missing TLS secrets referenced in SslConfig and UpstreamSslConfig will be treated as a warning instead of an error during validation. Defaults to true. This field has no effect if allowWarnings is false or acceptAllResources is true. (https://github.com/solo-io/gloo/issues/6957)

v1.18.0-beta15 (v1.18.0)

Wed, 14 Aug 2024 19:16:58 GMT

Fixes
- Only update the K8s Gateway resource statuses on change to improve HTTPRoute translation time. (https://github.com/solo-io/solo-projects/issues/6638)
Helm Changes
- Introduce `gatewayProxies.gatewayProxy.istioSpiffeCertProviderAddress` which overrides the Istio SPIFFE certificate provider (`CA_ADDR` env variable). It defaults to `gatewayProxies.gatewayProxy.discoveryAddress`. (https://github.com/solo-io/gloo/issues/9855)
New Features
- Expose `CorsPolicyMergeSettings` on `VirtualHostOptions` which allows users to specify how to reconcile CORS settings when configured on both Route and VirtualHost. Specifically it is now possible to define a `UNION` merge strategy for the `ExposeHeaders` field, resulting in the union of the headers set at Route and VirtualHost level being applied to traffic for the Route. (https://github.com/solo-io/gloo/issues/7689)

v1.18.0-beta14 (v1.18.0)

Fri, 09 Aug 2024 17:54:45 GMT

Fixes
- Fix a bug that causes edge to try to list endpoints across all namespaces when no upstreams exist. (https://github.com/solo-io/gloo/issues/5885)
Helm Changes
- Add a new field `global.securitySettings.floatingUserId` to the Gloo Helm chart that when set to `true` has the same effect as setting `floatingUserId=true` for all deployment-specific `floatingUserId`s, as well as setting `discovery.deployment.enablePodSecurityContext=false` and gatewayProxies.gatewayProxy.podTemplate.enablePodSecurityContext=false`to allow for easy OpenShift deployment. The global value will override any local settings. (https://github.com/solo-io/gloo/issues/5034)
- Ensure that image digests are set correctly for all image variants (standard, fips, distroless, fips-distroless). (https://github.com/solo-io/gloo/issues/9860)
New Features
- Provide a Helm field `global.securitySettings.floatingUserId` to apply floatingUserId logic, which unsets `runAsUser` for security contexts, for all deployments in the Gloo Helm chart. The global field will also cause templates to be rendered as if deployments with "enablePodSecurityContext` fields have their value set to `false` to allow for easy OpenShift deployment. This functionality has also been added to Gloo Gateway via the GatewayParameters resource. If `floatingUserId` is set in GatewayParameters, it will be applied to all deployments in the Gloo Gateway Helm chart, unless a deployment-specific value is set. (https://github.com/solo-io/gloo/issues/5034)
- Check the validity of Gloo Gateway License using `glooctl license validate --license-key `. (https://github.com/solo-io/gloo/issues/3520)

v1.18.0-beta13 (v1.18.0)

Fri, 02 Aug 2024 21:37:14 GMT

New Features
- Introduce API for oneWayTls in UpstreamSslConfig, which enables the capability for an upstream to be configured for one way TLS even if root CA data exists in the secret referenced by the UpstreamSslConfig. This feature does nothing when SDS is configured. (https://github.com/solo-io/gloo/issues/9826)

v1.18.0-beta12 (v1.18.0)

Tue, 30 Jul 2024 20:32:32 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.30.4-patch2.
New Features
- gateway2/route-options: merge extensionRef based attachments
- Enables merging of multiple ExtensionRef based RouteOption

v1.18.0-beta11 (v1.18.0)

Fri, 26 Jul 2024 16:18:22 GMT

Fixes
- gateway2/delegation: resolve comments from 739b0e950 (https://github.com/solo-io/solo-projects/issues/6621)
- gateway2/delegation: fix extraneous route arising from invalid child rule
- There's a bug where if a child route contains an invalid rule (rule
- The essence of this fix is to prune both the `rules` and `matches`
- invalid matchers on the child route are discarded
- invalid rules (no valid child matchers) are also discarded
- Previously, 2. was missing so a child route with a rule without

v1.18.0-beta10 (v1.18.0)

Mon, 22 Jul 2024 21:45:23 GMT

Fixes
- Add `AssertEventualCurlError` assertion for kubernetes e2e tests to assert that a curl command eventually fails. This is useful for validating that a route is not reachable/a deletion has taken effect. (https://github.com/solo-io/solo-projects/issues/6437)
- Fix a bug where the service and function names of a discovered gRPC service are not printed in JSON and YAML

v1.18.0-beta9 (v1.18.0)

Fri, 19 Jul 2024 14:48:08 GMT

Fixes
- Clarify the inheritance behavior of CORS APIs defined on the VirtualHost and Route level. Previously, there was a claim that when properties were defined at both levels, they were merged. However, the accurate behavior is that RouteOptions fields entirely override VirtualHostOptions when RouteOptions are defined. (https://github.com/solo-io/gloo/issues/8115)
New Features
- Add initial version of the API for the AI Gateway functionality. (https://github.com/solo-io/solo-projects/issues/6570)

v1.18.0-beta8 (v1.18.0)

Wed, 17 Jul 2024 16:57:12 GMT

Fixes
- Fix regex safety check for CORS allowed origins. Other instances in gloo already checked the regex either through compile or envoy validate. (https://github.com/solo-io/gloo/issues/7524)
- Resolves issue of HTTPS listeners not aggregating appropriately when defined using the same port on a kube gateway. (https://github.com/solo-io/solo-projects/issues/6559)

v1.18.0-beta7 (v1.18.0)

Thu, 11 Jul 2024 18:01:23 GMT

Fixes
- Allow GatewayParameters with selfManaged to be applied successfully on k8s versions below 1.29. (https://github.com/solo-io/gloo/issues/9740)

v1.18.0-beta6 (v1.18.0)

Tue, 09 Jul 2024 17:39:37 GMT

Fixes
- Infer the gloo deployment name in cases where the deployment name is not the default `gloo`. The gloo deployment is identified by the `gloo=gloo` label. (https://github.com/solo-io/gloo/issues/9163)
- Fix a bug where the service and function names of a discovered gRPC service are not printed when running glooctl get upstreams (https://github.com/solo-io/gloo/issues/9644)
New Features
- Use kube builder instead of skv2 for faster and easier codegen for GGv2 CRDs. (https://github.com/solo-io/solo-projects/issues/6490)

v1.18.0-beta5 (v1.18.0)

Thu, 04 Jul 2024 11:48:23 GMT

New Features
- gloo/api: add missing protos and fields
- Adds 2 missing protos: external_processor.proto and
- Adds a missing field to deprecation.proto used by
- gateway2: misc fixes for AI extension
- Removes listenAddress from GatewayParameters because it

v1.18.0-beta4 (v1.18.0)

Fri, 28 Jun 2024 20:37:42 GMT

New Features
- gateway2: enable provisioning of AI extension
- Enables the provisioning of the AI extproc extension

v1.18.0-beta3 (v1.18.0)

Fri, 28 Jun 2024 16:42:38 GMT

Dependency Bumps
- bitnami/kubectl has been upgraded to 1.29.6.
- golang/go has been upgraded to v1.22.4.
- solo-io/cloud-builders has been upgraded to v0.9.2.

v1.18.0-beta2 (v1.18.0)

Thu, 27 Jun 2024 17:31:55 GMT

Fixes
- Fix a bug where a hybrid gateway with non existing delegatedHttpGateways is accepted if no virtual services exist. This would only occur when the flag for isolating virtualservices by ssl configs is enabled. (https://github.com/solo-io/gloo/issues/8834)
- Move remaining non-user-facing default values for dynamically provisioned gateway proxies from internal helm chart to main Gloo Gateway helm chart. This allows features like Security Context to be configured/disabled. (https://github.com/solo-io/solo-projects/issues/6381)
- Update `glooctl check` to check for Kubernetes Gateway resources. (https://github.com/solo-io/solo-projects/issues/5741)
- Optimizes the `glooctl check` command by reducing the time taken to check resources by almost half in large environments consisting of over 500 namespaces (https://github.com/solo-io/gloo/issues/9673)
- Only act on GatewayClass resources that use the Gloo Gateway controller name (https://github.com/solo-io/gloo/issues/9660)
New Features
- Enable Envoy to accept requests with extended HTTP methods (such as `LABEL` or `UPDATE`). Previously, requests with these methods would return an HTTP 400 response. Currently, this functionality is supported for HTTP/1 only. (https://github.com/solo-io/gloo/issues/5579)
- Export Prometheus Metrics on Port 9091 for Gloo Gateway. (https://github.com/solo-io/solo-projects/issues/6393)

v1.18.0-beta1 (v1.18.0)

Thu, 20 Jun 2024 19:23:24 GMT

Fixes
- Previously, header names consisting of invalid characters such as '()[]:;,<=>' were accepted when passed via the healthCheck or headerManipulation `requestHeadersToAdd` parameter. This resulted in envoy throwing an `invalid header name` error. Now, header names are validated according to RFC 9110, which is the same validation used by envoy. If a header name consisting of invalid characters is passed via the aforementioned parameters, it is caught and rejected in edge and does not propagate to envoy. (https://github.com/solo-io/gloo/issues/9622)
- Fix statuses being synced properly for k8s gateway resources (https://github.com/solo-io/solo-projects/issues/6304)
- Follow up to fix discoveryAddress, istioMetaMeshId and istioMetaClusterId in k8s gateway deployment for Istio integration. (https://github.com/solo-io/solo-projects/issues/6107)
- Fix issue where Kube Gateway proxies would have errors regarding status logged constantly (https://github.com/solo-io/solo-projects/issues/6252)
Helm Changes
- Introduce `gateway.validation.webhook.enablePolicyApi` which controls whether or not RouteOptions and VirtualHostOptions CRs are subject to validation. By default, this value is true. The validation of these Policy APIs only runs if the Kubernetes Gateway integration is enabled (`kubeGateway.enabled`). (https://github.com/solo-io/solo-projects/issues/6352)
New Features
- Adds the `host_rewrite_header` to the route options to allow envoy to swapped the host header with the content of given downstream or custom header. Pay attention to the potential security implications of using this option. Provided header must come from trusted source. (https://github.com/solo-io/gloo/issues/9579)
- Adds pre-admission [validation rules](https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation-rules) to the `AuthConfig` CRD. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16010)
- Adds the ability to recover if the Kubernetes API server is unreachable once the gloo pod comes up. The `MAX_RECOVERY_DURATION_WITHOUT_KUBE_API_SERVER` environment variable defines the maximum duration the gloo pod can run and attempt to reconnect to the kube apiserver if it is unreachable. Exceeding this duration will lead to the pod quitting. To enable this feature, set the `MAX_RECOVERY_DURATION_WITHOUT_KUBE_API_SERVER` environment variable to the desired duration in the gloo container. This can be done either by modifying the gloo deployment or by specifying the `gloo.deployment.customEnv[0].Name=MAX_RECOVERY_DURATION_WITHOUT_KUBE_API_SERVER` and `gloo.deployment.customEnv[0].Value=60s` helm values. (https://github.com/solo-io/gloo/issues/8107)
- gateway2: merge multiple targetRef based Route & VirtualHost options
- Implements merging of targetRef based RouteOptions and
- The merging uses shallow merging such that for an option

v1.17.38 (v1.17.0)

Thu, 12 Mar 2026 18:10:57 GMT

Dependency Bumps
- golang/go has been upgraded to v1.25.8.
- golang/net has been upgraded to v0.51.0.
- containerd/containerd has been upgraded to v1.7.30.
- uber-go/mock has been upgraded to v0.6.0.
- open-telemetry/opentelemetry-go has been upgraded to v1.41.0.
Fixes
- fixed snapshot out of sync with envoy when upstream points to invalid service (https://github.com/solo-io/solo-projects/issues/8668)

v1.17.37 (v1.17.0)

Tue, 13 Jan 2026 02:44:44 GMT

Dependency Bumps
- rancher/kubectl has been upgraded to v1.34.3.

v1.17.36 (v1.17.0)

Mon, 22 Dec 2025 19:44:59 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.11.

v1.17.35 (v1.17.0)

Wed, 22 Oct 2025 02:05:26 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.9.
- solo-io/cloud-builders has been upgraded to v0.13.2.
Fixes
- Fixes a bug where the the default gatewayProxy when disabled would create invalid helm templates for custom proxies. (https://github.com/solo-io/solo-projects/issues/8613)

v1.17.34 (v1.17.0)

Thu, 25 Sep 2025 06:19:20 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.30.11-patch2.

v1.17.33 (v1.17.0)

Fri, 15 Aug 2025 15:48:50 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.6.
- solo-io/cloud-builders has been upgraded to v0.13.1.
- bitnami/kubectl has been upgraded to v1.33.3.
- solo-io/go-utils has been upgraded to v0.25.4.

v1.17.32 (v1.17.0)

Thu, 17 Jul 2025 18:25:00 GMT

Dependency Bumps
- helm/helm has been upgraded to v3.17.4.

v1.17.31 (v1.17.0)

Tue, 17 Jun 2025 23:09:00 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.4.

v1.17.30 (v1.17.0)

Fri, 06 Jun 2025 19:47:22 GMT

Dependency Bumps
- golang.org/crypto has been upgraded to v0.35.0.
- golang/go has been upgraded to v1.24.1.
Fixes
- Fix a bug in the gloo_solo_io_namespaces_watched metric that errors when the list of namespaces watched is large. (https://github.com/solo-io/solo-projects/issues/8319)
- Setting the `uuidRequestIdConfig` in the `HttpConnectionManagerSettings` now correctly sets the `RequestIdExtension` in the `HttpConnectionManager` filter.

v1.17.29 (v1.17.0)

Fri, 11 Apr 2025 20:18:48 GMT

v1.17.28 (v1.17.0)

Mon, 24 Mar 2025 15:06:07 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.30.10-patch1.

v1.17.27 (v1.17.0)

Wed, 12 Mar 2025 15:55:32 GMT

Dependency Bumps
- golang/go has been upgraded to v1.23.3.
- golang/go has been upgraded to v1.23.7.
Fixes
- Bump the alpine base container image to 3.21.3 (https://github.com/solo-io/solo-projects/issues/7956)
- Add support for setting filter state from the grpc access log with the gatewayProxies.gatewayProxy.gatewaySettings.accessLoggingService.accessLog.grpcService.filterStateObjectsToLog helm value (https://github.com/solo-io/solo-projects/issues/7923)

v1.17.26 (v1.17.0)

Thu, 27 Feb 2025 15:48:43 GMT

Fixes
- Discover the Gloo service using labels. In some environments, services must be renamed. This change allows the service to still be discovered when it's been renamed. In the event that multiple services in the namespace have the gloo=gloo and app=gloo labels, an error will occur. (https://github.com/solo-io/solo-projects/issues/7646)

v1.17.25 (v1.17.0)

Tue, 25 Feb 2025 15:44:06 GMT

Fixes
- Fixes a memory leak caused by an indefinitely growing map (https://github.com/solo-io/solo-projects/issues/7805)

v1.17.24 (v1.17.0)

Mon, 17 Feb 2025 20:46:37 GMT

Extra Notes
- This release contained no user-facing changes.

v1.17.23 (v1.17.0)

Fri, 14 Feb 2025 00:35:56 GMT

Dependency Bumps
- solo-io/solo-kit has been upgraded to v0.35.6.

v1.17.22 (v1.17.0)

Tue, 11 Feb 2025 19:20:06 GMT

Fixes
- Fixes the gateway params image to respect the fips and distroless variants specified by global.image.variant. This only applies to the kubernetes gateway proxy. (https://github.com/solo-io/gloo/issues/10602)

v1.17.21 (v1.17.0)

Wed, 08 Jan 2025 20:02:44 GMT

Extra Notes
- This release contained no user-facing changes.

v1.17.20 (v1.17.0)

Tue, 07 Jan 2025 15:31:22 GMT

Fixes
- When merging parent-child policies, the merging should allow child

v1.17.19 (v1.17.0)

Fri, 20 Dec 2024 00:44:46 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.30.9-patch1.
Fixes
- Route delegation makes use of delegation.gateway.solo.io/*

v1.17.18 (v1.17.0)

Thu, 19 Dec 2024 15:43:18 GMT

Dependency Bumps
- golang.org/x/net has been upgraded to v0.33.0.

v1.17.17 (v1.17.0)

Wed, 18 Dec 2024 20:37:02 GMT

Dependency Bumps
- moby/moby has been upgraded to v26.0.0.
- golang.org/crypto has been upgraded to v0.31.0.
- solo-io/solo-kit has been upgraded to v0.35.5.
Fixes
- Fixes an issue where an error is thrown instead of an InvalidDestinationWarning when a tracing collector references a missing upstream. (https://github.com/k8sgateway/k8sgateway/issues/10293)
- gateway2/delegation: enable inherited policy overrides
- Adds the ability to override inherited policy fields when
- Functionally, a child RouteOption may only override the RouteOptions
- Testing done:
- Translator tests for the new scenarios. (https://github.com/solo-io/solo-projects/issues/7315)
- Remove docs for external APIs (https://github.com/solo-io/solo-projects/issues/6768)

v1.17.16 (v1.17.0)

Fri, 08 Nov 2024 21:46:44 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to 1.30.6-patch5.
- solo-io/envoy-gloo has been upgraded to v1.30.6-patch3.
Fixes
- Added support for early header manipulation on Gateways. This feature allows headers to be manipulated before significant processing and routing decisions. It affords the ability to add or remove headers that affect request processing and can be used to implement override headers. This can be configured by setting the `gateway.spec.httpGateway.options.httpConnectionManagerSettings.earlyHeaderMutation` field. The headersToAdd field will add key-value pair headers to the request if not already present or overwrite them unless append is set to true. The headersToRemove field removes the specified headers and is processed after the headers have been added. (https://github.com/solo-io/gloo/issues/9604)
- Fix `glooctl check` so that it only checks Proxies in the write namespace (where all proxies are written), instead of checking in each of the watch namespaces. (https://github.com/solo-io/gloo/issues/9935)
- When using the Kubernetes Gateway API, the provisioned ServiceAccount's labels and annotations are now configurable via the GatewayParameters fields `spec.kube.serviceAccount.extraLabels` and `spec.kube.serviceAccount.extraAnnotations`. These values can also be set on the default GatewayParameters during install/upgrade using the Helm values `kubeGateway.gatewayParameters.glooGateway.serviceAccount.extraLabels` and `kubeGateway.gatewayParameters.glooGateway.serviceAccount.extraAnnotations`. (https://github.com/solo-io/solo-projects/issues/6846)
- Enable modifying the span name for tracing purposes using InjaTemplates in the transformation filter. More information on OpenTelemetry span names can be found here: https://opentelemetry.io/docs/specs/semconv/http/http-spans/ (https://github.com/solo-io/gloo/issues/9848)
- Add metrics for translatation timing and time for taken to sync served xDS entries.
Helm Changes
- Expose new Helm values `kubeGateway.gatewayParameters.glooGateway.service.extraLabels` and `kubeGateway.gatewayParameters.glooGateway.service.extraAnnotations` to set extra labels and extra annotations on the default GatewayParameters. (https://github.com/solo-io/solo-projects/issues/7090)

v1.17.15 (v1.17.0)

Mon, 28 Oct 2024 16:56:17 GMT

Dependency Bumps
- solo-io/envoy-gloo-ee has been upgraded to v1.30.6-patch2.
Fixes
- Fixes a bug where gloo segfaults if resources are applied to a unwatched namespace. (https://github.com/solo-io/solo-projects/issues/7082)

v1.17.14 (v1.17.0)

Thu, 03 Oct 2024 13:32:16 GMT

Extra Notes
- This release contained no user-facing changes.

v1.17.13 (v1.17.0)

Wed, 02 Oct 2024 18:16:49 GMT

Extra Notes
- This release contained no user-facing changes.

v1.17.12 (v1.17.0)

Wed, 02 Oct 2024 16:00:34 GMT

Fixes
- Changes to downgrade the level of strictness added in 1.17.8 for TLS secret validation. We still validate several pieces of the cert but also scrub down to usable bits. This means we avoid envoy nacks while allowing more non-useful or functional info in our TLS secrets. This means we are RFC compliant but it may mean that there could exist some cert data in an edge case which we will elide from envoy but previously would be nacked. (https://github.com/solo-io/solo-projects/issues/6772)

v1.17.11 (v1.17.0)

Tue, 01 Oct 2024 17:41:37 GMT

Fixes
- Fix a bug that caused discovered Upstreams to not reflect the updated state of parent Services discovered using watchLabels (https://github.com/solo-io/gloo/issues/8635)

v1.17.10 (v1.17.0)

Tue, 24 Sep 2024 17:21:03 GMT

Extra Notes
- This release contained no user-facing changes.

v1.17.9 (v1.17.0)

Mon, 23 Sep 2024 20:06:06 GMT

Dependency Bumps
- solo-io/solo-kit has been upgraded to v0.35.4.
Fixes
- Adds a new field `watchNamespaceSelectors` to the settings CR. This allows users to specify namespaces to watch based on label selectors. The `watchNamespaces` field will override this if specified. (https://github.com/solo-io/gloo/issues/9274)
- Adds a new helm value `settings.watchNamespaceSelectors`. This allows users to specify namespaces to watch based on label selectors that can be specified via `settings.watchNamespaceSelectors.matchLabels` for an exact label match and `settings.watchNamespaceSelectors.matchExpressions` for more generic requirements. The `settings.watchNamespaces` field will override this if specified. (https://github.com/solo-io/gloo/issues/9274)

v1.17.8 (v1.17.0)

Mon, 16 Sep 2024 23:37:06 GMT

Dependency Bumps
- solo-io/cloud-builders has been upgraded to 0.9.3.
- golang/go has been upgraded to go1.22.7.
Fixes
- Increase timeout/retries for glooctl check when connecting to the gateway using port forwarding. (https://github.com/solo-io/gloo/issues/10020)
- Fixes an issue on upgrades to 1.17+ where persistproxyspec was set to true. Persist proxy spec is configured in helm via gateway.persistProxySpec or in ee gloo.gateway.persistProxySpec (https://github.com/solo-io/gloo/issues/9968)
- Plugs a gap where go would check a secret for validity per spec but envoy is more aggressive. For example a tls secret with a certchain that contains an invalid pem block will be rejected by envoy but not go. Prior to this pr these types of secrets would be accepted by gloo and nacked by envoy. (https://github.com/solo-io/solo-projects/issues/6772)

v1.17.7 (v1.17.0)

Wed, 28 Aug 2024 20:57:55 GMT

Extra Notes
- This release contained no user-facing changes.

v1.17.6 (v1.17.0)

Wed, 28 Aug 2024 13:51:31 GMT

Extra Notes
- This release contained no user-facing changes.

v1.17.5 (v1.17.0)

Mon, 26 Aug 2024 17:04:23 GMT

Fixes
- Fix for issue where a missing TLS secret was treated by validation as an error, potentially bringing down the entire HTTPS gateway if the gloo pod restarts while in this bad state. This is a breaking change in the default behavior of validation.
Helm Changes
- New field gateway.validation.warnMissingTlsSecret controls whether missing TLS secrets referenced in SslConfig and UpstreamSslConfig will be treated as a warning instead of an error during validation. Defaults to false. This field has no effect if allowWarnings is false or acceptAllResources is true. (https://github.com/solo-io/gloo/issues/6957)

v1.17.4 (v1.17.0)

Fri, 16 Aug 2024 17:23:27 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to 1.30.4-patch4.
Fixes
- gateway2/route-options: merge extensionRef based attachments
- Enables merging of multiple ExtensionRef based RouteOption
- Only update the K8s Gateway resource statuses on change to improve HTTPRoute translation time. (https://github.com/solo-io/solo-projects/issues/6638)
- Support defining the PriorityClassName on a GatewayProxy deployment. This allows users to attach pods to PriorityClasses (https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/) (https://github.com/solo-io/gloo/issues/9010)
- gateway2: merge multiple targetRef based Route & VirtualHost options
- Implements merging of targetRef based RouteOptions and
- The merging uses shallow merging such that for an option
- Update Envoy to enable thread-local slots to be deallocated on worker threads. This provides greater stability in Envoy when the main thread is under heavy load. This behaviour can be disabled by toggling the runtime flag envoy_restart_features_allow_slot_destroy_on_worker_threads. (https://github.com/solo-io/solo-projects/issues/6713)
Helm Changes
- Ensure that gateway-proxy deployments respect the `gatewayProxy.NAME.kind.deployment.priorityClassName` field. This API allows you to set the PriorityClassName for gateway-proxy Pods. This is already supported on all other Gloo deployments. (https://github.com/solo-io/gloo/issues/8677)
- Introduce `gatewayProxies.gatewayProxy.istioSpiffeCertProviderAddress` which overrides the Istio SPIFFE certificate provider (`CA_ADDR` env variable). It defaults to `gatewayProxies.gatewayProxy.discoveryAddress`. (https://github.com/solo-io/gloo/issues/9855)

v1.17.3 (v1.17.0)

Mon, 12 Aug 2024 16:40:18 GMT

Fixes
- Provide a Helm field `global.securitySettings.floatingUserId` to apply floatingUserId logic, which unsets `runAsUser` for security contexts, for all deployments in the Gloo Helm chart. The global field will also cause templates to be rendered as if deployments with "enablePodSecurityContext` fields have their value set to `false` to allow for easy OpenShift deployment. This functionality has also been added to Gloo Gateway via the GatewayParameters resource. If `floatingUserId` is set in GatewayParameters, it will be applied to all deployments in the Gloo Gateway Helm chart, unless a deployment-specific value is set. (https://github.com/solo-io/gloo/issues/5034)
Helm Changes
- Add a new field `global.securitySettings.floatingUserId` to the Gloo Helm chart that when set to `true` has the same effect as setting `floatingUserId=true` for all deployment-specific `floatingUserId`s, as well as setting `discovery.deployment.enablePodSecurityContext=false` and gatewayProxies.gatewayProxy.podTemplate.enablePodSecurityContext=false`to allow for easy OpenShift deployment. The global value will override any local settings. (https://github.com/solo-io/gloo/issues/5034)

v1.17.2 (v1.17.0)

Fri, 09 Aug 2024 18:00:09 GMT

Fixes
- Set the 'message' field on various HTTPRoute conditions to enable easier troubleshooting (https://github.com/solo-io/gloo/issues/9859)
- gateway2/delegation: fix extraneous route arising from invalid child rule
- There's a bug where if a child route contains an invalid rule (rule
- The essence of this fix is to prune both the `rules` and `matches`
- invalid matchers on the child route are discarded
- invalid rules (no valid child matchers) are also discarded
- Previously, 2. was missing so a child route with a rule without
- Fix a bug that causes edge to try to list endpoints across all namespaces when no upstreams exist. (https://github.com/solo-io/gloo/issues/5885)
Helm Changes
- Ensure that image digests are set correctly for all image variants (standard, fips, distroless, fips-distroless). (https://github.com/solo-io/gloo/issues/9860)

v1.17.1 (v1.17.0)

Tue, 23 Jul 2024 15:44:42 GMT

Fixes
- Fix a bug where the service and function names of a discovered gRPC service are not printed in JSON and YAML

v1.17.0 (v1.17.0)

Mon, 15 Jul 2024 17:51:09 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.30.4-patch1.
Fixes
- Fix regex safety check for CORS allowed origins. Other instances in gloo already checked the regex either through compile or envoy validate. (https://github.com/solo-io/gloo/issues/7524)

v1.17.0-rc12 (v1.17.0)

Fri, 12 Jul 2024 19:00:16 GMT

Fixes
- Resolves issue of HTTPS listeners not aggregating appropriately when defined using the same port on a kube gateway. (https://github.com/solo-io/solo-projects/issues/6559)

v1.17.0-rc11 (v1.17.0)

Wed, 10 Jul 2024 00:35:40 GMT

Fixes
- Use kube builder instead of skv2 for faster and easier codegen for GGv2 CRDs. (https://github.com/solo-io/solo-projects/issues/6490)
- Optimizes the `glooctl check` command by reducing the time taken to check resources by almost half in large environments consisting of over 500 namespaces (https://github.com/solo-io/gloo/issues/9673)
- Infer the gloo deployment name in cases where the deployment name is not the default `gloo`. The gloo deployment is identified by the `gloo=gloo` label. (https://github.com/solo-io/gloo/issues/9163)
- Fix a bug where the service and function names of a discovered gRPC service are not printed when running glooctl get upstreams (https://github.com/solo-io/gloo/issues/9644)

v1.17.0-rc10 (v1.17.0)

Fri, 28 Jun 2024 18:59:58 GMT

Extra Notes
- This release contained no user-facing changes.

v1.17.0-rc9 (v1.17.0)

Fri, 28 Jun 2024 15:46:19 GMT

Dependency Bumps
- bitnami/kubectl has been upgraded to 1.29.6.
- golang/go has been upgraded to v1.22.4.
- solo-io/cloud-builders has been upgraded to v0.9.2.

v1.17.0-rc8 (v1.17.0)

Wed, 26 Jun 2024 21:54:26 GMT

New Features
- Enable Envoy to accept requests with extended HTTP methods (such as `LABEL` or `UPDATE`). Previously, requests with these methods would return an HTTP 400 response. Currently, this functionality is supported for HTTP/1 only. (https://github.com/solo-io/gloo/issues/5579)

v1.17.0-rc7 (v1.17.0)

Tue, 25 Jun 2024 23:24:11 GMT

Fixes
- Move remaining non-user-facing default values for dynamically provisioned gateway proxies from internal helm chart to main Gloo Gateway helm chart. This allows features like Security Context to be configured/disabled. (https://github.com/solo-io/solo-projects/issues/6381)
- Update `glooctl check` to check for Kubernetes Gateway resources. (https://github.com/solo-io/solo-projects/issues/5741)
- Only act on GatewayClass resources that use the Gloo Gateway controller name (https://github.com/solo-io/gloo/issues/9660)
New Features
- Export Prometheus Metrics on Port 9091 for Gloo Gateway. (https://github.com/solo-io/solo-projects/issues/6393)

v1.17.0-rc6 (v1.17.0)

Fri, 21 Jun 2024 16:52:21 GMT

v1.17.0-rc5 (v1.17.0)

Wed, 19 Jun 2024 14:27:17 GMT

Fixes
- Adds the `host_rewrite_header` to the route options to allow envoy to swapped the host header with the content of given downstream or custom header. Pay attention to the potential security implications of using this option. Provided header must come from trusted source. (https://github.com/solo-io/gloo/issues/9579)
- Previously, header names consisting of invalid characters such as '()[]:;,<=>' were accepted when passed via the healthCheck or headerManipulation `requestHeadersToAdd` parameter. This resulted in envoy throwing an `invalid header name` error. Now, header names are validated according to RFC 9110, which is the same validation used by envoy. If a header name consisting of invalid characters is passed via the aforementioned parameters, it is caught and rejected in edge and does not propagate to envoy. (https://github.com/solo-io/gloo/issues/9622)
- Fix issue where Kube Gateway proxies would have errors regarding status logged constantly (https://github.com/solo-io/solo-projects/issues/6252)
New Features
- Adds the ability to recover if the Kubernetes API server is unreachable once the gloo pod comes up. The `MAX_RECOVERY_DURATION_WITHOUT_KUBE_API_SERVER` environment variable defines the maximum duration the gloo pod can run and attempt to reconnect to the kube apiserver if it is unreachable. Exceeding this duration will lead to the pod quitting. To enable this feature, set the `MAX_RECOVERY_DURATION_WITHOUT_KUBE_API_SERVER` environment variable to the desired duration in the gloo container. This can be done either by modifying the gloo deployment or by specifying the `gloo.deployment.customEnv[0].Name=MAX_RECOVERY_DURATION_WITHOUT_KUBE_API_SERVER` and `gloo.deployment.customEnv[0].Value=60s` helm values. (https://github.com/solo-io/gloo/issues/8107)

v1.17.0-rc4 (v1.17.0)

Thu, 13 Jun 2024 19:45:26 GMT

Fixes
- Resync the Gloo Gateway Controller when a Service is updated. (https://github.com/solo-io/solo-projects/issues/6332)
- Fix `glooctl check` to not rely on existence of proxy deployments when checking proxies. (https://github.com/solo-io/solo-projects/issues/5741)
New Features
- Enables routing to AWS Lambda and Azure Function upstreams via the GGv2 API. (https://github.com/solo-io/solo-projects/issues/6160)
- Add HttpListenerOption policy for use with Kube Gateway API resources (https://github.com/solo-io/solo-projects/issues/6319)

v1.17.0-rc3 (v1.17.0)

Wed, 12 Jun 2024 19:17:47 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.30.2-patch2.
Helm Changes
- Fix istioIntegration.enabled helm value to configure bootstrap configmap. Remove deprecated istioSDS.enabled as a requirement for Istio automtls integration. (https://github.com/solo-io/solo-projects/issues/5743)
New Features
- Add support for the [envoy.http.stateful_session.header filter](https://www.envoyproxy.io/docs/envoy/latest/configuration/http/http_filters/stateful_session_filter) This support has been added via a new HTTPListener option, `stateful_session` which can be used to configure the filter. Envoy notes about this filter: - Stateful sessions can result in imbalanced load across upstreams and allow external actors to direct requests to specific upstream hosts. Operators should carefully consider the security and reliability implications of stateful sessions before enabling this feature. - This extension is functional but has not had substantial production burn time, use only with this caveat. - This extension has an unknown security posture and should only be used in deployments where both the downstream and upstream are trusted. (https://github.com/solo-io/gloo/issues/9104)

v1.17.0-rc2 (v1.17.0)

Fri, 07 Jun 2024 19:16:01 GMT

Fixes
- Properly pass through the `json_to_proto` value from the gloo API to the envoy API for dynamic metadata transformations. (https://github.com/solo-io/solo-projects/issues/5890)
Helm Changes
- Rename the kube gateway envoy container image helm value from `kubeGateway.gatewayParameters.glooGateway.image` to `kubeGateway.gatewayParameters.glooGateway.envoyContainer.image`. (https://github.com/solo-io/solo-projects/issues/6107)
New Features
- Add API for adding metadata to endpoints in static/failover upstreams. This metadata can
- Add new plugin type to allow adding filter in the upstream filter chain. (https://github.com/solo-io/solo-projects/issues/5890)

v1.17.0-rc1 (v1.17.0)

Wed, 05 Jun 2024 22:41:39 GMT

Fixes
- Adds error types for plugins errors to differentiate between validation errors and validation warnings in order to support preventing the validation webhook rejecting config due to eventual consistency issues with the RateLimitConfig resource. (https://github.com/solo-io/solo-projects/issues/6251)
- Changing error type to warning will deflake the validation webhook rejecting config due to eventual consistency issues with the RateLimitConfig resource. (https://github.com/solo-io/solo-projects/issues/5307)
- Adds initial error types for plugins errors to differentiate between validation errors and validation warnings. (https://github.com/solo-io/gloo/issues/7357)
Helm Changes
- Add k8s Gateway Istio integration values to the Gloo Gateway Helm chart under kubeGateway.gatewayParameters.glooGateway. (https://github.com/solo-io/solo-projects/issues/5743)

v1.17.0-beta35 (v1.17.0)

Tue, 04 Jun 2024 19:01:31 GMT

New Features
- New CRDs added for ListenerOption and HttpListenerOption resources (https://github.com/solo-io/solo-projects/issues/5941)
- Add ListenerOption as a policy resource for use with Kube Gateway API objects.

v1.17.0-beta34 (v1.17.0)

Fri, 31 May 2024 13:25:33 GMT

Fixes
- Resolves issue where default GatewayParameters could be passed invalid fields and fail to render (https://github.com/solo-io/solo-projects/issues/6257)
- Fix bug in `glooctl get proxy` that returned duplicate proxies. (https://github.com/solo-io/solo-projects/issues/6088)
Helm Changes
- Mark Istio integration helm values that rely on double proxy setup as deprecated. This includes: - global.istioIntegration.labelInstallNamespace - global.istioIntegration.whitelistDiscovery - global.istioIntegration.enableIstioSidecarOnGateway - global.istioIntegration.istioSidecarRevTag - global.istioIntegration.appendXForwardedHost (https://github.com/solo-io/solo-projects/issues/5743)
New Features
- gateway2: enable self-managed Gateways
- Adds capability to integrate self-managed gateways
- It adds a selfManaged field to the GatewayParameters

v1.17.0-beta33 (v1.17.0)

Wed, 29 May 2024 13:47:10 GMT

Breaking Changes
- Deprecate Gloo Edge as an Ingress Controller (https://github.com/solo-io/gloo/issues/8978)
- The `ErrNoSupportedSidecar` has been removed from the `projects/gloo/cli/pkg/cmd/istio/sidecars` package as we no longer support any versions that would trigger this error. (https://github.com/solo-io/gloo/issues/8990)
Dependency Bumps
- k8s.io/api has been upgraded to v0.29.2.
- k8s.io/apiextensions-apiserver has been upgraded to v0.29.2.
- k8s.io/apimachinery has been upgraded to v0.29.2.
- k8s.io/apiserver has been upgraded to v0.29.2.
- k8s.io/cli-runtime has been upgraded to v0.29.2.
- k8s.io/client-go has been upgraded to v0.29.2.
- sigs.k8s.io/code-generator has been upgraded to v0.29.2.
- sigs.k8s.io/component-base has been upgraded to v0.29.2.
- sigs.k8s.io/component-helpers has been upgraded to v0.29.2.
- sigs.k8s.io/kubectl has been upgraded to v0.29.2.
- sigs.k8s.io/metrics has been upgraded to v0.29.2.
- sigs.k8s.io/controller-runtime has been upgraded to v0.17.4.
- onsi/ginkgo/v2 has been upgraded to v2.14.0.
- onsi/gomega has been upgraded to v1.30.0.
- go.uber.org/zap has been upgraded to v1.26.0.
- solo-io/k8s-utils has been upgraded to v0.7.2.
- solo-io/skv2 has been upgraded to v0.39.1.
- solo-io/solo-apis has been upgraded to sa-k8s-1.29-bump.
- solo-io/solo-kit has been upgraded to v0.35.0.
Fixes
- Fix issue where upstream creation/deletion were not being reconciled by the K8s Gateway controller. (https://github.com/solo-io/solo-projects/issues/6222)
Helm Changes
- Startup probe has been enabled by default in Istio helm charts. See [Istio 1.20.0 release notes](https://istio.io/latest/news/releases/1.20.x/announcing-1.20/upgrade-notes/#startupprobe-added-to-sidecar-by-default) for more information and halm values to revert the startup probe enablement. (https://github.com/solo-io/gloo/issues/8990)

v1.17.0-beta32 (v1.17.0)

Fri, 24 May 2024 12:37:44 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.30.1-patch1.
Fixes
- Added default service type of LoadBalancer to default GatewayParameters. This value will be inherited by each deployed gateway proxy unless it is overridden in a GatewayParameters attached to the Gateway resource which generated it. (https://github.com/solo-io/solo-projects/issues/6113)
- Fixes bug that prevented deleted HTTPRoutes from being fully reconciled to proxies (https://github.com/solo-io/gloo/issues/9508)
- Make GatewayParameters fields nullable so they are more easily overridable. (https://github.com/solo-io/solo-projects/issues/6107)
Helm Changes
- Introduced new fields to kubeGateway top-level field which configure the deployed Gateway proxies generated from a Gateway. Also introduced a new default GatewayParameters to be rendered when kubeGateway.enabled=true. This contains defaults for Istio/SDS, as well as things like envoy image, deployment replicas, and extra labels in the pod template. (https://github.com/solo-io/solo-projects/issues/6107)
New Features
- Introduced a new default GatewayParameters which is associated with a GatewayClass and represents the default values applied to Gateways created from that GatewayClass that don't otherwise have a specific GatewayParameters attached. (https://github.com/solo-io/solo-projects/issues/6107)
- gateway2/delegation: enable optional parent matcher inheritance
- In the current design, a child route must have route matchers
- There's a request to enable matcher inheritance from the parent

v1.17.0-beta31 (v1.17.0)

Wed, 22 May 2024 16:07:59 GMT

Fixes
- Set the previously-missing HTTPS listener data when the listeners are translated. (https://github.com/solo-io/solo-projects/issues/6201)

v1.17.0-beta30 (v1.17.0)

Tue, 21 May 2024 20:17:14 GMT

Extra Notes
- This release contained no user-facing changes.

v1.17.0-beta29 (v1.17.0)

Mon, 20 May 2024 18:36:48 GMT

Dependency Bumps
- solo-io/k8s-utils has been upgraded to v0.6.3.
Fixes
- gateway2: simplify how plugins handle delegated routes
- This change simplifies how plugins may perform merging
- Further, it accurately tracks the source RouteOptions
- Removed the `--proxy-ns` flag from `glooctl get proxy`, as proxies are now all written to the discoveryNamespace specified in settings. (https://github.com/solo-io/solo-projects/issues/6088)
New Features
- Add helm values for all containers to allow for conforming to [Pod Security Standards](https://kubernetes.io/docs/concepts/security/pod-security-standards/) (https://github.com/solo-io/gloo/issues/8864)

v1.17.0-beta28 (v1.17.0)

Thu, 16 May 2024 17:51:26 GMT

Helm Changes
- Adds a new helm value `global.additionalLabels` that specifies additional labels to add to gloo resources. (https://github.com/solo-io/gloo/issues/9035)
New Features
- Adds webhook validation for Gloo Gateway Policies (e.g. RouteOption and VirtualHostOption) when used with Kubernetes Gateway API (https://github.com/solo-io/solo-projects/issues/6063)

v1.17.0-beta27 (v1.17.0)

Mon, 13 May 2024 18:37:15 GMT

Fixes
- This change updates the route sorting such that regex based matchers
- Further, it avoids prioritizing regex based matchers based on their
- Refactor our TestInstallation to make it more re-usable with Portal E2E tests. (https://github.com/solo-io/solo-projects/issues/6029)
New Features
- This change implements policy inheritance, specifically
- Additionally, it does the following:
- Refactors the RouteOption query API to perform merging
- Translator tests for the many scenarios of policy inheritance.
- Converts delegation translator test to a table-driven test.
- E2e tests to verify the inheritance and merge functionality. (https://github.com/solo-io/solo-projects/issues/6161)

v1.17.0-beta26 (v1.17.0)

Thu, 09 May 2024 20:53:27 GMT

Dependency Bumps
- bitnami/kubectl has been upgraded to 1.28.9.
- solo-io/envoy-gloo has been upgraded to v1.29.3-patch2.
Fixes
- Fix a bug where Lambdas returning multiValueHeaders with non-string type with `unwrapAsApiGateway` enabled would result in a 500 response to the caller (https://github.com/solo-io/gloo/issues/8867)

v1.17.0-beta25 (v1.17.0)

Fri, 03 May 2024 14:58:15 GMT

New Features
- Adds the API for a new enterprise only feature designed to allow authenticating requests using tokens from the google metadata service before sending the requests upstreams. This feature will be exposed as a new Upstream type. (https://github.com/solo-io/gloo/issues/6828)
- Upstream Support: enable the use of Gloo Edge v1 Upstreams as destinations for using routes and mirror policy from the K8s Gateway API. (https://github.com/solo-io/solo-projects/issues/6129)
- Add VirtualHostOptions status tracking for Kubernetes Gateways (https://github.com/solo-io/solo-projects/issues/6044)

v1.17.0-beta24 (v1.17.0)

Tue, 30 Apr 2024 19:39:07 GMT

Dependency Bumps
- stretchr/testify has been upgraded to v1.8.4.
- solo-io/protoc-gen-openapi has been upgraded to v0.2.2.
Fixes
- Fix RouteOption resource statuses used for policy attachment (via targetRef) with separate status syncer. (https://github.com/solo-io/solo-projects/issues/6084)
- Fixs the issue of all routes and route tables warning of an invalid route when an unsupported route action is defined on a listener with the grpcjson plugin enabled. (https://github.com/solo-io/gloo/issues/9160)
Helm Changes
- Disable kubernetes gateway api integration by default. (https://github.com/solo-io/solo-projects/issues/6080)
New Features
- Route delegation: explicitly pass route's hostnames to plugins so that delegatee (child) routes without hostnames can be associated with their corresponding hostnames. (https://github.com/solo-io/solo-projects/issues/6121)
- Route delegation: enable HTTP route delegation with Gateway API, such that a parent route may delegate routing decisions to other routes that match the parent route rules consisting of path prefix, headers, and query parameters. (https://github.com/solo-io/solo-projects/issues/6121)

v1.17.0-beta23 (v1.17.0)

Thu, 25 Apr 2024 15:23:06 GMT

Fixes
- Fix a bug that caused the validation server to incorrectly reject deletion operations for Kube type Upstreams (https://github.com/solo-io/gloo/issues/6543)
New Features
- Adds a new Listener level access log option. Previously Edge was able to configure Proxy level logging for TCP proxies and HTTPConnectionManager(hcm) level logging for HTTP. With this change there is a new listeneroption that will configure http listener level logs. While http hcm has generally more useful logs there are certain logging command operators that are not usable at certain levels. The old version of logging and the new version are also both configurable concurrently but will have a higher performance overhead. This change also introduces a new warning log for command operators that are not useful for a given levels. For now this warning is purely a log line to reduce thrash before hardening these checks. (https://github.com/solo-io/gloo/issues/8438)

v1.17.0-beta22 (v1.17.0)

Tue, 16 Apr 2024 21:18:52 GMT

Dependency Bumps
- onsi/ginkgo/v2 has been upgraded to v2.17.0.
- onsi/gomega has been upgraded to v1.30.0.
- golang.org/x/crypto has been upgraded to v0.18.0.
- golang.org/x/sync has been upgraded to v0.6.0.
- golang.org/x/tools has been upgraded to v0.17.0.
Fixes
- Fix controller plumbing to watch for and reconcile changes to VirtualHostOption resources in the Kubernetes Gateway controller (https://github.com/solo-io/solo-projects/issues/6002)
New Features
- Introduce VirtualHostOption plugin for the Kubernetes Gateway API integration. This plugin will honor VirtualHostOption resources and when translating K8s Gateway resources and apply their contents to the appropriate sections of the final proxy object. (https://github.com/solo-io/solo-projects/issues/6002)

v1.17.0-beta21 (v1.17.0)

Sun, 14 Apr 2024 00:25:43 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.29.3-patch1.
- golang/go has been upgraded to v1.22.2.
- solo-io/cloud-builders has been upgraded to v0.9.1.
Fixes
- Revert "Hardcode Envoy's reloadable feature for TE header sanitization to false" (#9307) (https://github.com/solo-io/gloo/issues/9232)

v1.17.0-beta20 (v1.17.0)

Fri, 12 Apr 2024 17:07:27 GMT

Fixes
- Simplify the control plane helm API for the Kubernetes Gateway integration, and remove unused values. There is now just one helm flag (`kubeGateway.enabled`) that is used to enable/disable the Kubernetes Gateway integration. (https://github.com/solo-io/solo-projects/issues/5856)

v1.17.0-beta19 (v1.17.0)

Thu, 11 Apr 2024 22:10:06 GMT

New Features
- RouteOption resources used for policy attachment (via targetRef) will now have their status correctly set based on the result of translation (https://github.com/solo-io/solo-projects/issues/5934)
- Introduce targetRef field to VirtualHostOption resource. This will allow users of the Kubernetes Gateway API to specify which Gateway resource, and optionally which Listeners on that resource will be affected by the VirtualHostOption (https://github.com/solo-io/solo-projects/issues/6002)

v1.17.0-beta18 (v1.17.0)

Wed, 10 Apr 2024 13:06:57 GMT

Fixes
- Restrict the certgen job's secret access to just the gloo installation namespace. The certgen job does not require cluster wide access to secrets as it only manages secrets within the gloo installation namespace. (https://github.com/solo-io/gloo/issues/5960)
New Features
- Add new GatewayParameters CRD to allow configuration of dynamically provisioned proxies in Gloo Gateway. (https://github.com/solo-io/solo-projects/issues/5909)
Extra Notes
- *This release is building...*

v1.17.0-beta17 (v1.17.0)

Tue, 09 Apr 2024 00:05:46 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.36.5.
New Features
- Support policy attachment for RouteOption resources (https://github.com/solo-io/solo-projects/issues/5714)

v1.17.0-beta16 (v1.17.0)

Wed, 03 Apr 2024 18:07:18 GMT

Fixes
- Hardcode Envoy's reloadable feature for TE header sanitization to false. This feature as it exists in 1.29.2 breaks gRPC upstreams whose client library expects `TE: trailers`. This hardcode will be removed when Gloo Edge depends upon 1.29.3, which has a fix for the gRPC case but is currently unreleased. (https://github.com/solo-io/gloo/issues/9232)
- The Gloo Gateway deployer now gets the xDS host and port from the gloo service, instead of using potentially incorrect values. (https://github.com/solo-io/solo-projects/issues/5949)

v1.17.0-beta15 (v1.17.0)

Fri, 29 Mar 2024 21:38:26 GMT

Fixes
- Fix glooctl asset builds to crossbuild with the appropriate architecture.
- skipCI-kube-tests:true skipCI-docs-build:true (https://github.com/solo-io/gloo/issues/9295)

v1.17.0-beta14 (v1.17.0)

Wed, 27 Mar 2024 16:37:59 GMT

Breaking Changes
- Set the `service_name` field used to create the the [Envoy OpenTelemetryConfig](https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/trace/v3/opentelemetry.proto.html) to the name of the Gateway under which the [Gloo OpenTelemetryConfig](https://docs.solo.io/gloo-edge/latest/reference/api/github.com/solo-io/gloo/projects/gloo/api/external/envoy/config/trace/v3/opentelemetry.proto.sk/#package-soloioenvoyconfigtracev3) is defined.
Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.29.2-patch2.
Fixes
- Fixes and improvements to glooctl version command:
- glooctl version previously had a bug displaying the tag when a digest image is used. It would show "latest" instead of showing the actual version.
- Both yaml and json options have been fixed to pretty the output. Previously both options did not format the display.
- This improvement also now includes kubernetes server version information. (https://github.com/solo-io/gloo/issues/9211)
New Features
- Expose the `dynamic_stats` option on the Envoy router. This flag is only intended to be used for benchmarking purposes - it is NOT RECOMMENDED to set this in production.
- Add ability to use `%METADATA()%` command directives in envoy access log format config. These will eventually replace `%DYNAMIC_METADATA()%`, `%UPSTREAM_METADATA()%`, and `%CLUSTER_METADATA()%` as well as adding support for `ROUTE` and `LISTENER`.
Extra Notes
- *This release build failed.*

v1.17.0-beta13 (v1.17.0)

Wed, 20 Mar 2024 19:56:15 GMT

Dependency Bumps
- envoy-gloo/solo-io has been upgraded to 1.27.3-patch2.
Fixes
- Move resource cleanup job to pre-delete Helm hook. This fixes an issue where Helm uninstall would not complete when the validation webhook's failure policy was set to "Fail". (https://github.com/solo-io/solo-projects/issues/5903)
Helm Changes
- Adds a new helm variable `global.image.variant` to specify the variant of the image to be deployed. Can take the values 'standard', 'fips', 'distroless', 'fips-distroless'. Defaults to 'standard'. (The 'fips' and 'fips-distroless' variants are an Enterprise-only feature). This consequently deprecates the `global.image.fips` value. Use `global.image.variant=fips` instead. (https://github.com/solo-io/gloo/issues/8849)
New Features
- Added support for `settings.gloo.istioOptions.enableAutoMtls` to implement auto mTLS via Envoy transport_socket_match. (https://github.com/solo-io/solo-projects/issues/5695)
- Add support for distroless images. (https://github.com/solo-io/gloo/issues/8849)

v1.17.0-beta12 (v1.17.0)

Tue, 12 Mar 2024 14:46:21 GMT

Breaking Changes
- `glooctl get proxy` will not work if you have persisted Proxy CRs in etcD and you are querying and older server version (1.16 and below). In general, we recommend that you keep your client and server versions in sync. You can verify the client/server versions you are currently running by calling `glooctl version`. (https://github.com/solo-io/solo-projects/issues/5874)

v1.17.0-beta11 (v1.17.0)

Thu, 07 Mar 2024 23:10:40 GMT

Dependency Bumps
- helm.sh/helm has been upgraded to v3.14.2.

v1.17.0-beta10 (v1.17.0)

Fri, 01 Mar 2024 15:31:45 GMT

Extra Notes
- This release contained no user-facing changes.

v1.17.0-beta9 (v1.17.0)

Thu, 29 Feb 2024 19:12:28 GMT

Dependency Bumps
- rotisserie/eris has been upgraded to v0.5.4.
- solo-io/solo-kit has been upgraded to v0.34.2.
New Features
- Update to allow deletion of secrets when warnings or errors are present. When the deletion of a secret is validated, the validating admission webhook removes the secret from the current snapshot, runs translations and looks for errors. Previously, the secret would not be deleted if there were errors, or if there were warnings and the `ignore_warnings` setting was set as `false`. This casues issues when trying to delete secrets that are unrelated to the warnings or errors. The new behavior is to collect all the artifacts of the valdiation process, rerun validation against the original snapshot, and compare the artifacts from that process to the artifacts previously collected. If the artifacts are the same, the secret did not degrade the system and the deletion is allowed. If the artifacts are different, the secret is not deleted and errors are returned. Because this may incur a performance hit due to the extra validation and the loss of short-circuiting of the validation process due to the need to collect all artifacts, this feature can be turned off by setting the `DISABLE_VALIDATION_AGAINST_PREVIOUS_STATE` environment variable to `true` in the `gloo` deployment. A dedicated helm value has not been added, and the environment variable can be set using `gloo.gloo.deployment.customEnv` (https://github.com/solo-io/gloo/issues/8931)
- Expose use_hostname_for_hashing, the hostname will be used for hashing when using maglev for example, useful when using multiple host in the upstreams that resolve to the same IP. (https://github.com/solo-io/gloo/issues/9138)

v1.17.0-beta8 (v1.17.0)

Fri, 09 Feb 2024 20:41:32 GMT

Fixes
- Re-enable wget in our gloo and gateway-proxy pods. Wget is currently used in our non-custom probes which are currently not well covered in tests. Caused by https://github.com/solo-io/solo-projects/issues/5344 shift to ubuntu. (https://github.com/solo-io/gloo/issues/9092)
New Features
- Expose a new ratelimit option `grpcService.authority` to configure the authority header for the ratelimit gRPC call. (https://github.com/solo-io/gloo/issues/8995)

v1.17.0-beta7 (v1.17.0)

Fri, 02 Feb 2024 20:49:03 GMT

Breaking Changes
- Disable Istio Envoy proxy from running by default and only rely on proxyless Istio agent mtls integration. Note: Although this is a change to the default behavior of the istio integration, this should not have any impact on most users as the sidecar proxy was unused in the data path. (https://github.com/solo-io/solo-projects/issues/5711)
Helm Changes
- Add helm flags for setting log level on sds container `.Values.global.glooMtls.sds.logLevel` and setting log level on istio-proxy container `global.glooMtls.istioProxy.logLevel`. (https://github.com/solo-io/gloo/issues/9006)
New Features
- Expose the `global.istioIntegration.AppendXForwardedHost` Helm value to allow users to toggle off the appending of

v1.17.0-beta6 (v1.17.0)

Thu, 01 Feb 2024 18:58:11 GMT

New Features
- Add the option to allow retries for gRPC Passthrough Auth in case the service is unavailable. This can be configured via the new `retryPolicy` in the PassThroughGrpc AuthConfig. (https://github.com/solo-io/gloo/issues/6804)

v1.17.0-beta5 (v1.17.0)

Tue, 30 Jan 2024 18:32:01 GMT

Dependency Bumps
- solo-io/go-control-plane-fork-v2 has been upgraded to v1.29.0-patch1.
- google.golang.org/protobuf has been upgraded to v1.32.0.
Fixes
- When deploying edge with tilt + helm, the resource-rollout-job is deleted before the install completes which causes the deployment to fail. The cleanup for the resource-rollout job is now moved to a pre-upgrade hook to ensure that the job exists so deployments now succeed. (https://github.com/solo-io/gloo/issues/9033)

v1.17.0-beta4 (v1.17.0)

Thu, 18 Jan 2024 01:39:21 GMT

New Features
- Introduces a new Enterprise setting `settings.observabilityOptions.grafanaIntegration.dashboardPrefix` that specifies the prefix for the title and UID of Grafana Dashboards created. It is restricted to 20 characters in length. This is useful when the data is aggregated to a central grafana instance so they do not conflict across multiple Gloo environments. Note that any dashboard created without a prefix or with a different prefix will need to be manually removed on changing this value. (https://github.com/solo-io/gloo/issues/9022)
- Introduces a new Enterprise setting `gloo.settings.observabilityOptions.grafanaIntegration.extraMetricQueryParameters` that specifies additional query parameters to add to all metric query definitions in the Grafana dashboards generated by gloo. It is a string and can consist of multiple query parameters separated by a comma. For example `cluster="some-cluster",gateway_proxy_id="proxy-2"`. (https://github.com/solo-io/gloo/issues/9016)

v1.17.0-beta3 (v1.17.0)

Wed, 17 Jan 2024 01:25:17 GMT

Fixes
- Add missing required runtime key for aggression in slow start config. (https://github.com/solo-io/gloo/pull/9031)
Helm Changes
- Updates to helper functions to recognize `sds-ee` images as fips-suppported (https://github.com/solo-io/gloo/issues/8909)

v1.17.0-beta2 (v1.17.0)

Wed, 03 Jan 2024 19:25:38 GMT

Helm Changes
- The `discovery` and `ingress-proxy` Deployments now respect the `deployment.runAsUser` value in the Helm chart.
- Added settings.secretOptions.sources[].vault.aws.leaseIncrement to allow users to specify the lease increment for Hashicorp token renewal. This value is passed as the 'Increment' parameter to the Hashicorp vault API. (https://github.com/solo-io/solo-projects/issues/5438)
New Features
- Add renewal logic for Hashicorp vault tokens. The settings.secretOptions.sources[].vault.aws.leaseIncrement field can be used to specify the lease increment for Hashicorp token renewal. This value is passed as the 'Increment' parameter to the Hashicorp vault API.

v1.17.0-beta1 (v1.17.0)

Tue, 19 Dec 2023 17:35:20 GMT

Dependency Bumps
- golang.org/crypto has been upgraded to v0.17.0.

v1.16.27 (v1.16.0)

Thu, 17 Jul 2025 17:48:46 GMT

Dependency Bumps
- helm/helm has been upgraded to v3.17.4.

v1.16.26 (v1.16.0)

Tue, 17 Jun 2025 23:08:47 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.4.

v1.16.25 (v1.16.0)

Sat, 14 Jun 2025 00:30:24 GMT

Dependency Bumps
- golang.org/crypto has been upgraded to v0.35.0.
- golang/go has been upgraded to v1.24.1.
- solo-io/cloud-builders has been upgraded to v0.12.1.

v1.16.24 (v1.16.0)

Wed, 12 Mar 2025 16:01:22 GMT

v1.16.23 (v1.16.0)

Thu, 19 Dec 2024 16:07:01 GMT

Dependency Bumps
- golang.org/x/net has been upgraded to v0.33.0.
- golang.org/crypto has been upgraded to v0.31.0.
- solo-io/solo-kit has been upgraded to v0.34.4.
Fixes
- Remove docs for external APIs (https://github.com/solo-io/solo-projects/issues/6768)

v1.16.22 (v1.16.0)

Wed, 02 Oct 2024 20:42:07 GMT

Extra Notes
- This release contained no user-facing changes.

v1.16.21 (v1.16.0)

Tue, 01 Oct 2024 17:41:50 GMT

Fixes
- Fix a bug that caused discovered Upstreams to not reflect the updated state of parent Services discovered using watchLabels (https://github.com/solo-io/gloo/issues/8635)

v1.16.20 (v1.16.0)

Wed, 04 Sep 2024 17:11:20 GMT

Fixes
- Fix for issue where a missing TLS secret was treated by validation as an error, potentially bringing down the entire HTTPS gateway if the gloo pod restarts while in this bad state. This is a breaking change in the default behavior of validation. To enable this behavior, use the helm setting `gateway.validation.warnMissingTlsSecret=true` or the same field on the Settings CR. This field has no effect if allowWarnings is false or acceptAllResources is true. (https://github.com/solo-io/gloo/issues/6957)
Helm Changes
- New field gateway.validation.warnMissingTlsSecret controls whether missing TLS secrets referenced in SslConfig and UpstreamSslConfig will be treated as a warning instead of an error during validation. Defaults to false. This field has no effect if allowWarnings is false or acceptAllResources is true. (https://github.com/solo-io/gloo/issues/6957)

v1.16.19 (v1.16.0)

Thu, 15 Aug 2024 12:23:27 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.27.7-patch2.
Fixes
- Update Envoy to enable thread-local slots to be deallocated on worker threads. This provides greater stability in Envoy when the main thread is under heavy load. This behaviour can be disabled by toggling the runtime flag envoy_restart_features_allow_slot_destroy_on_worker_threads. (https://github.com/solo-io/solo-projects/issues/6713)
- Fix a bug where the service and function names of a discovered gRPC service are not printed in JSON and YAML
Helm Changes
- Introduce `gatewayProxies.gatewayProxy.istioSpiffeCertProviderAddress` which overrides the Istio SPIFFE certificate provider (`CA_ADDR` env variable). It defaults to `gatewayProxies.gatewayProxy.discoveryAddress`. (https://github.com/solo-io/gloo/issues/9855)

v1.16.18 (v1.16.0)

Mon, 15 Jul 2024 17:12:48 GMT

Fixes
- Fix regex safety check for CORS allowed origins. Other instances in gloo already checked the regex either through compile or envoy validate. (https://github.com/solo-io/gloo/issues/7524)
- Infer the gloo deployment name in cases where the deployment name is not the default `gloo`. The gloo deployment is identified by the `gloo=gloo` label. (https://github.com/solo-io/gloo/issues/9163)
- Optimizes the `glooctl check` command by reducing the time taken to check resources by almost half in large environments consisting of over 500 namespaces (https://github.com/solo-io/gloo/issues/9673)
- Fix a bug where the service and function names of a discovered gRPC service are not printed when running glooctl get upstreams (https://github.com/solo-io/gloo/issues/9644)

v1.16.17 (v1.16.0)

Fri, 28 Jun 2024 14:51:14 GMT

Dependency Bumps
- bitnami/kubectl has been upgraded to 1.28.11.
- golang/go has been upgraded to v1.21.11.
- solo-io/cloud-builders has been upgraded to v0.8.8.

v1.16.16 (v1.16.0)

Fri, 14 Jun 2024 21:27:37 GMT

v1.16.15 (v1.16.0)

Tue, 11 Jun 2024 15:29:48 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.27.6-patch1.

v1.16.14 (v1.16.0)

Tue, 21 May 2024 18:37:33 GMT

Dependency Bumps
- solo-io/k8s-utils has been upgraded to v0.6.3.
Fixes
- Add helm values for all containers to allow for conforming to [Pod Security Standards](https://kubernetes.io/docs/concepts/security/pod-security-standards/) (https://github.com/solo-io/gloo/issues/8864)

v1.16.13 (v1.16.0)

Thu, 09 May 2024 20:24:02 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.27.5-patch2.
Fixes
- Fix a bug where Lambdas returning multiValueHeaders with non-string type with `unwrapAsApiGateway` enabled would result in a 500 response to the caller (https://github.com/solo-io/gloo/issues/8867)

v1.16.12 (v1.16.0)

Tue, 07 May 2024 17:06:19 GMT

Dependency Bumps
- bitnami/kubectl has been upgraded to 1.28.9.

v1.16.11 (v1.16.0)

Fri, 03 May 2024 19:40:56 GMT

Fixes
- Fixs the issue of all routes and route tables warning of an invalid route when an unsupported route action is defined on a listener with the grpcjson plugin enabled. (https://github.com/solo-io/gloo/issues/9160)

v1.16.10 (v1.16.0)

Sun, 14 Apr 2024 02:13:50 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.27.4-patch1.
- golang/go has been upgraded to v1.21.9.
- solo-io/cloud-builders has been upgraded to v0.8.4.

v1.16.9 (v1.16.0)

Fri, 22 Mar 2024 17:00:51 GMT

Fixes
- Move resource cleanup job to pre-delete Helm hook. This fixes an issue where Helm uninstall would not complete when the validation webhook's failure policy was set to "Fail". (https://github.com/solo-io/solo-projects/issues/5903)

v1.16.8 (v1.16.0)

Thu, 14 Mar 2024 20:17:11 GMT

Dependency Bumps
- envoy-gloo/solo-io has been upgraded to 1.27.3-patch2.

v1.16.7 (v1.16.0)

Mon, 11 Mar 2024 18:48:17 GMT

Fixes
- Expose use_hostname_for_hashing, the hostname will be used for hashing when using maglev for example, useful when using multiple host in the upstreams that resolve to the same IP. (https://github.com/solo-io/gloo/issues/9138)

v1.16.6 (v1.16.0)

Tue, 05 Mar 2024 00:07:34 GMT

Dependency Bumps
- helm.sh/helm has been upgraded to v3.14.2.

v1.16.5 (v1.16.0)

Mon, 04 Mar 2024 15:53:21 GMT

Dependency Bumps
- rotisserie/eris has been upgraded to v0.5.4.
- solo-io/solo-kit has been upgraded to v0.34.2.
Fixes
- Update to allow deletion of secrets when warnings or errors are present.
Helm Changes
- Add helm flags for setting log level on sds container `.Values.global.glooMtls.sds.logLevel` and setting log level on istio-proxy container `global.glooMtls.istioProxy.logLevel`. (https://github.com/solo-io/gloo/issues/9006)

v1.16.4 (v1.16.0)

Tue, 13 Feb 2024 20:42:32 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.27.3-patch1.
Fixes
- Add the option to allow retries for gRPC Passthrough Auth in case the service is unavailable. This can be configured via the new `retryPolicy` in the PassThroughGrpc AuthConfig. (https://github.com/solo-io/gloo/issues/6804)
- Expose the `global.istioIntegration.AppendXForwardedHost` Helm value to allow users to toggle off the appending of
- Expose a new ratelimit option `grpcService.authority` to configure the authority header for the ratelimit gRPC call. (https://github.com/solo-io/gloo/issues/8995)
- Re-enable wget in our gloo and gateway-proxy pods. Wget is currently used in our non-custom probes which are currently not well covered in tests. Caused by https://github.com/solo-io/solo-projects/issues/5344 shift to ubuntu. (https://github.com/solo-io/gloo/issues/9092)

v1.16.3 (v1.16.0)

Wed, 31 Jan 2024 15:23:32 GMT

Fixes
- When deploying edge with tilt + helm, the resource-rollout-job is deleted before the install completes which causes the deployment to fail. The cleanup for the resource-rollout job is now moved to a pre-upgrade hook to ensure that the job exists so deployments now succeed. (https://github.com/solo-io/gloo/issues/9033)

v1.16.2 (v1.16.0)

Mon, 22 Jan 2024 21:23:04 GMT

Helm Changes
- Updates to helper functions to recognize `sds-ee` images as fips-suppported (https://github.com/solo-io/gloo/issues/8909)

v1.16.1 (v1.16.0)

Mon, 22 Jan 2024 18:15:30 GMT

Fixes
- Introduces a new Enterprise setting `settings.observabilityOptions.grafanaIntegration.dashboardPrefix` that specifies the prefix for the title and UID of Grafana Dashboards created. It is restricted to 20 characters in length. This is useful when the data is aggregated to a central grafana instance so they do not conflict across multiple Gloo environments. Note that any dashboard created without a prefix or with a different prefix will need to be manually removed on changing this value. (https://github.com/solo-io/gloo/issues/9022)
- Introduces a new Enterprise setting `gloo.settings.observabilityOptions.grafanaIntegration.extraMetricQueryParameters` that specifies additional query parameters to add to all metric query definitions in the Grafana dashboards generated by gloo. It is a string and can consist of multiple query parameters separated by a comma. For example `cluster="some-cluster",gateway_proxy_id="proxy-2"`. (https://github.com/solo-io/gloo/issues/9016)
- Add missing required runtime key for aggression in slow start config. (https://github.com/solo-io/gloo/pull/9031)

v1.16.0 (v1.16.0)

Fri, 12 Jan 2024 15:32:46 GMT

Extra Notes
- This release contained no user-facing changes.

v1.16.0-rc3 (v1.16.0)

Tue, 02 Jan 2024 20:50:05 GMT

Fixes
- Add renewal logic for Hashicorp vault tokens. The settings.secretOptions.sources[].vault.aws.leaseIncrement field can be used to specify the lease increment for Hashicorp token renewal. This value is passed as the 'Increment' parameter to the Hashicorp vault API.
Helm Changes
- Added settings.secretOptions.sources[].vault.aws.leaseIncrement to allow users to specify the lease increment for Hashicorp token renewal. This value is passed as the 'Increment' parameter to the Hashicorp vault API. (https://github.com/solo-io/solo-projects/issues/5438)

v1.16.0-rc2 (v1.16.0)

Tue, 19 Dec 2023 18:06:22 GMT

Dependency Bumps
- golang.org/crypto has been upgraded to v0.17.0.

v1.16.0-rc1 (v1.16.0)

Fri, 15 Dec 2023 20:01:53 GMT

Dependency Bumps
- linux/alpine has been upgraded to 3.17.6.
Fixes
- Update glooctl inject for sds to not include v in the version (https://github.com/solo-io/gloo/pull/8983)

v1.16.0-beta28 (v1.16.0)

Thu, 07 Dec 2023 17:40:55 GMT

Breaking Changes
- Bump dependencies to support Kubernetes 1.28 (https://github.com/solo-io/gloo/issues/8515)
Dependency Bumps
- golang/go has been upgraded to v1.21.5.
- k8s.io/api has been upgraded to v0.28.3.
- k8s.io/apiextensions-apiserver has been upgraded to v0.28.3.
- k8s.io/apimachinery has been upgraded to v0.28.3.
- k8s.io/client-go has been upgraded to v0.28.3.
- sigs.k8s.io/code-generator has been upgraded to v0.28.3.
- sigs.k8s.io/component-base has been upgraded to v0.28.3.
- sigs.k8s.io/kubectl has been upgraded to v0.28.3.
- sigs.k8s.io/controller-runtime has been upgraded to v0.16.3.
- helm.sh/helm has been upgraded to v3.13.2.
- onsi/ginkgo/v2 has been upgraded to v2.11.0.
- onsi/gomega has been upgraded to v1.27.10.
- go.uber.org/zap has been upgraded to v1.25.0.
- solo-io/go-utils has been upgraded to v0.24.8.
- solo-io/k8s-utils has been upgraded to v0.6.0.
- solo-io/skv2 has been upgraded to v0.36.0.
- solo-io/solo-apis has been upgraded to sa-k8s-1.28-bump.
- solo-io/solo-kit has been upgraded to v0.34.0.
- solo-io/cloud-builders has been upgraded to v0.8.1.

v1.16.0-beta27 (v1.16.0)

Wed, 06 Dec 2023 17:38:50 GMT

Dependency Bumps
- envoy-gloo/solo-io has been upgraded to v1.27.2-patch1.

v1.16.0-beta26 (v1.16.0)

Fri, 17 Nov 2023 15:01:46 GMT

Dependency Bumps
- golang/go has been upgraded to v1.21.4.
- solo-io/cloud-builders has been upgraded to v0.7.0.

v1.16.0-beta25 (v1.16.0)

Thu, 16 Nov 2023 15:13:40 GMT

Fixes
- Fix upgrade issues from v1.15.16, v1.14.27 and v1.13.32 to v1.16.0-beta20+. This was caused due to the resource-rollout RBAC being a pre-upgrade/install helm hook in v1.16.0-beta20+ while not being a hook in the latest LTS releases. This fix moves the resource-rollout RBAC out of the pre-upgrade/install hook in this release. Upgrades from v1.16.0-beta20+ will require running the following commands prior to the upgrade to cleanup the pre-upgrade/install resource-rollout RBAC helm hooks. ``` export RELEASE_NAMESPACE="gloo-system" # replace this with the installation namespace export RBAC_SUFFIX=`kubectl get ClusterRole | grep gloo-resource-rollout | sed 's/gloo-resource-rollout//g' | cut -d ' ' -f 1` kubectl delete ClusterRole gloo-resource-rollout$RBAC_SUFFIX kubectl delete ClusterRoleBinding gloo-resource-rollout$RBAC_SUFFIX kubectl delete Role gloo-resource-rollout -n $RELEASE_NAMESPACE kubectl delete RoleBinding gloo-resource-rollout -n $RELEASE_NAMESPACE kubectl delete ServiceAccount gloo-resource-rollout -n $RELEASE_NAMESPACE ``` (https://github.com/solo-io/gloo/issues/8902)
Helm Changes
- Adds the new helm value `gatewayproxy.proxyName.disableExtauthSidecar` to disable the extauth sidecar on a given gateway proxy when `global.extensions.extAuth.envoySidecar` is set. Defaults to false. This is used with enterprise extauth deployments. (https://github.com/solo-io/gloo/issues/8430)

v1.16.0-beta24 (v1.16.0)

Thu, 09 Nov 2023 17:31:34 GMT

Helm Changes
- Adds a new helm value `global.extraCustomResources` to allow users to add additional custom resources to create, as defined by a helm partial (https://github.com/solo-io/solo-projects/issues/5490)

v1.16.0-beta23 (v1.16.0)

Thu, 09 Nov 2023 16:28:41 GMT

New Features
- Add additional options to the OidcAuthorizationCodeConfig API to configure Azure-specific details for resolving distributed claims. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12848)

v1.16.0-beta22 (v1.16.0)

Wed, 08 Nov 2023 19:30:17 GMT

Extra Notes
- This release contained no user-facing changes.

v1.16.0-beta21 (v1.16.0)

Mon, 06 Nov 2023 16:12:20 GMT

Fixes
- Avoid allowing glooctl to install v2 variants without an explicit call for it. This may be reverted later once we have a better understanding of upgrade path.

v1.16.0-beta20 (v1.16.0)

Thu, 02 Nov 2023 17:38:00 GMT

Dependency Bumps
- solo-io/go-control-plane-fork-v2 has been upgraded to v0.0.0-20231026174848-be784d54c527.
Fixes
- Fixes the issue of defining a custom readiness probe for the gateway proxy for zero downtime upgrades via helm with the `--wait` flag and via ArgoCD. (https://github.com/solo-io/gloo/issues/8288)

v1.16.0-beta19 (v1.16.0)

Tue, 31 Oct 2023 18:56:35 GMT

Dependency Bumps
- golang.org/grpc has been upgraded to 1.59.0.
- jhump/protoreflect has been upgraded to v1.15.3.

v1.16.0-beta18 (v1.16.0)

Fri, 27 Oct 2023 19:49:37 GMT

Fixes
- Glooctl should now correctly respect kube context if passed. (https://github.com/solo-io/gloo/pull/7623)

v1.16.0-beta17 (v1.16.0)

Tue, 24 Oct 2023 19:31:17 GMT

Extra Notes
- This release contained no user-facing changes.

v1.16.0-beta16 (v1.16.0)

Fri, 20 Oct 2023 18:05:05 GMT

v1.16.0-beta15 (v1.16.0)

Thu, 12 Oct 2023 16:43:14 GMT

Dependency Bumps
- solo-io/cloud-builders has been upgraded to v0.6.5.
- solo-io/envoy-gloo has been upgraded to v1.26.5-patch1.
- solo-io/go-control-plane-fork-v2 has been upgraded to v0.11.1/forked-extproc.
Fixes
- Remove the Envoy cluster from the error log when validating clusters, avoiding the exposure of sensitive data (secrets). (https://github.com/solo-io/gloo/issues/8592)
- **IMPORTANT**: `Secret` deletions are now being validated. This _could_ cause a slight performance degradation when deleting Secrets. To opt-out, add `'secrets'` to `gateway.validation.webhook.skipDeleteValidationResources`. (https://github.com/solo-io/gloo/issues/8001)
Helm Changes
- Adds the helm value `gateway.rolloutJob.timeout` to specifiy the timeout to wait for the resource rollout job to complete. (https://github.com/solo-io/gloo/issues/8782)
New Features
- Exposes cluster option for preconnect policy. Explicitly scoped to just upstreams as this is RARELY a good feature to use. (https://github.com/solo-io/solo-projects/issues/5411)

v1.16.0-beta14 (v1.16.0)

Thu, 05 Oct 2023 21:31:25 GMT

v1.16.0-beta13 (v1.16.0)

Tue, 03 Oct 2023 18:42:46 GMT

New Features
- Add a `clientAuthentication` block to the OidcAuthorizationCode config to allow for client secret and private key jwt client authentication methods (https://github.com/solo-io/gloo/issues/7744)

v1.16.0-beta12 (v1.16.0)

Tue, 03 Oct 2023 15:33:43 GMT

Fixes
- Migrate from alpine to ubuntu for released version. Backlogged an issue to move fully to distroless on beta branch. Can be found here https://github.com/solo-io/solo-projects/issues/5388 Not migrating prior as this may impact some debugging steps. Forced to migrate per glibc being unable to update. https://nvd.nist.gov/vuln/detail/CVE-2022-23218 https://nvd.nist.gov/vuln/detail/CVE-2022-23219 https://nvd.nist.gov/vuln/detail/CVE-2021-38604 https://nvd.nist.gov/vuln/detail/CVE-2021-3998 See here for glibc on alpine maintainers https://gitlab.alpinelinux.org/alpine/tsc/-/issues/43#note_306270 https://github.com/sgerrand/alpine-pkg-glibc/issues/207#issuecomment-1707209887 https://github.com/sgerrand/alpine-pkg-glibc/issues/176 (https://github.com/solo-io/solo-projects/issues/5344)

v1.16.0-beta11 (v1.16.0)

Fri, 22 Sep 2023 18:23:36 GMT

Extra Notes
- This release contained no user-facing changes.

v1.16.0-beta10 (v1.16.0)

Thu, 21 Sep 2023 14:34:21 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.26.4-patch3.
Fixes
- Support role chaining using EKS ServiceAccounts outside of us-east-1 (https://github.com/solo-io/gloo/issues/8578)
Helm Changes
- Fix TTL not being respected on Helm hook jobs due to deletion policy. (https://github.com/solo-io/gloo/issues/8500)
New Features
- Add support for `most_specific_header_mutations_wins` to allow the more specific header mutation to win. Toggling it on would reverse the evaluation order of the header mutations, allowing more specific header mutations to overwrite less specific.

v1.16.0-beta9 (v1.16.0)

Sat, 09 Sep 2023 12:02:22 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.26.2-patch4.
- solo-io/go-control-plane-fork-v2 has been upgraded to v0.11.1.
- solo-io/k8s-utils has been upgraded to v0.5.1.
Helm Changes
- Add new certgen CronJob if validation webhook is enabled (https://github.com/solo-io/gloo/issues/5944)
- Add an option to enable `force-rotation` flag for certgen job (https://github.com/solo-io/gloo/issues/5944)
- Fix syntax error in Gateway yaml when using kube overrides. (https://github.com/solo-io/gloo/issues/8648)
New Features
- Certgen job will now renew existing certificate if it is expiring soon (90d by default). (https://github.com/solo-io/gloo/issues/5944)

v1.16.0-beta8 (v1.16.0)

Thu, 07 Sep 2023 19:54:47 GMT

Extra Notes
- This release contained no user-facing changes.

v1.16.0-beta7 (v1.16.0)

Wed, 06 Sep 2023 14:45:54 GMT

Fixes
- Make Vault's AWS credentials optional. This allows users to integrate AWS Security Token Service (STS) or IAM Roles for Service Accounts (IRSA) for temporary credentials. https://developer.hashicorp.com/vault/docs/auth/aws#iam-authentication-inferences (https://github.com/solo-io/gloo/issues/8533)
Helm Changes
- Breakdown Job and their respective RBAC helm values for the gloo deployment (https://github.com/solo-io/gloo/issues/8616)
- Expose `secretOptions` in `Settings` Helm chart. (https://github.com/solo-io/gloo/issues/8533)
New Features
- Gloo now supports local limiting. This restricts the rate of connections per gateway, virtual host or route using envoy's own local rate limit filter, thus no longer requiring the need for an external rate limit server. This includes both the network and http local rate limit filter. (https://github.com/solo-io/gloo/issues/7428)

v1.16.0-beta6 (v1.16.0)

Thu, 31 Aug 2023 18:55:48 GMT

Dependency Bumps
- sigs.k8s.io/controller-runtime has been upgraded to v0.15.2.
Fixes
- Prevent error when modifying settings by making sure loggers get initialized. (https://github.com/solo-io/gloo/issues/8627)
New Features
- Add field to ExtAuth API's OIDC AuthorizationCode plugin to eventually support mapping claims to headers. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10589)

v1.16.0-beta5 (v1.16.0)

Tue, 29 Aug 2023 19:17:38 GMT

Helm Changes
- Added PodDisruptionBudget helm values for the gloo deployment (https://github.com/solo-io/gloo/issues/8445)
New Features
- Update AuthConfig protos to support querying OPA sidecar for policy decisions. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10237)

v1.16.0-beta4 (v1.16.0)

Mon, 21 Aug 2023 16:49:55 GMT

New Features
- Expose the ability to overwrite headers in HTTP Passthrough Auth with the added allowedUpstreamHeaderToOverwrite field. (https://github.com/solo-io/gloo/issues/8477)

v1.16.0-beta3 (v1.16.0)

Fri, 18 Aug 2023 18:16:46 GMT

Fixes
- Fix incorrect CRD generation and overflow caused of proto fileds of type `google.protobuf.UInt64Value`. Previously fields of this type had an incorrect schema as well as led to overflows which led to them failing being unmarshalled, which is now resolved by changing the type to `google.protobuf.UInt32Value`, which is backward-forward compatible. Ref. https://protobuf.dev/programming-guides/proto2/#updating point 5. Affected protos include gateway specs `httpGateway.options.caching.maxPayloadSize` and `httpGateway.options.connectionLimit.maxActiveConnections` (https://github.com/solo-io/gloo/issues/8568)

v1.16.0-beta2 (v1.16.0)

Tue, 15 Aug 2023 15:18:13 GMT

Fixes
- Add a default case when converting Solo ratelimit actions to Enovy actions. (https://github.com/solo-io/gloo/issues/8573)

v1.16.0-beta1 (v1.16.0)

Mon, 14 Aug 2023 20:44:01 GMT

Dependency Bumps
- solo-io/cloud-builders has been upgraded to v0.6.4.
Fixes
- Check for empty values in fields that are required by Envoy for RateLimitActions. Previously invalid config would be passed to Envoy. API reference: https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/route/v3/route_components.proto#config-route-v3-ratelimit-action. (https://github.com/solo-io/gloo/issues/8573)

v1.15.36 (v1.15.0)

Wed, 12 Mar 2025 15:56:31 GMT

v1.15.35 (v1.15.0)

Fri, 20 Dec 2024 15:24:33 GMT

Dependency Bumps
- golang.org/crypto has been upgraded to v0.31.0.
- golang.org/x/net has been upgraded to v0.33.0.
- solo-io/solo-kit has been upgraded to v0.36.2.
Fixes
- Remove docs for external APIs (https://github.com/solo-io/solo-projects/issues/6768)

v1.15.34 (v1.15.0)

Mon, 07 Oct 2024 20:44:35 GMT

Extra Notes
- This release contained no user-facing changes.

v1.15.33 (v1.15.0)

Wed, 02 Oct 2024 20:42:47 GMT

Extra Notes
- This release contained no user-facing changes.

v1.15.32 (v1.15.0)

Tue, 01 Oct 2024 17:41:57 GMT

Fixes
- Fix a bug that caused discovered Upstreams to not reflect the updated state of parent Services discovered using watchLabels (https://github.com/solo-io/gloo/issues/8635)

v1.15.31 (v1.15.0)

Fri, 06 Sep 2024 18:33:47 GMT

Fixes
- Fix for issue where a missing TLS secret was treated by validation as an error, potentially bringing down the entire HTTPS gateway if the gloo pod restarts while in this bad state. This is a breaking change in the default behavior of validation. To enable this behavior, use the helm setting `gateway.validation.warnMissingTlsSecret=true` or the same field on the Settings CR. This field has no effect if allowWarnings is false or acceptAllResources is true. (https://github.com/solo-io/gloo/issues/6957)
Helm Changes
- New field gateway.validation.warnMissingTlsSecret controls whether missing TLS secrets referenced in SslConfig and UpstreamSslConfig will be treated as a warning instead of an error during validation. Defaults to false. This field has no effect if allowWarnings is false or acceptAllResources is true. (https://github.com/solo-io/gloo/issues/6957)

v1.15.30 (v1.15.0)

Tue, 23 Jul 2024 15:53:46 GMT

Fixes
- Fix a bug where the service and function names of a discovered gRPC service are not printed in JSON and YAML
- Infer the gloo deployment name in cases where the deployment name is not the default `gloo`. The gloo deployment is identified by the `gloo=gloo` label. (https://github.com/solo-io/gloo/issues/9163)
- Optimizes the `glooctl check` command by reducing the time taken to check resources by almost half in large environments consisting of over 500 namespaces (https://github.com/solo-io/gloo/issues/9673)
- Fix a bug where the service and function names of a discovered gRPC service are not printed when running glooctl get upstreams (https://github.com/solo-io/gloo/issues/9644)

v1.15.29 (v1.15.0)

Fri, 28 Jun 2024 14:50:48 GMT

Dependency Bumps
- bitnami/kubectl has been upgraded to 1.27.15.
- solo-io/cloud-builders has been upgraded to v0.7.7.

v1.15.28 (v1.15.0)

Thu, 09 May 2024 19:47:16 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.26.8-patch2.
Fixes
- Fix a bug where Lambdas returning multiValueHeaders with non-string type with `unwrapAsApiGateway` enabled would result in a 500 response to the caller (https://github.com/solo-io/gloo/issues/8867)

v1.15.27 (v1.15.0)

Tue, 07 May 2024 17:06:45 GMT

Dependency Bumps
- bitnami/kubectl has been upgraded to 1.27.13.

v1.15.26 (v1.15.0)

Fri, 03 May 2024 19:41:08 GMT

v1.15.25 (v1.15.0)

Sun, 14 Apr 2024 02:14:19 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.26.8-patch1.
- solo-io/cloud-builders has been upgraded to v0.7.6.

v1.15.24 (v1.15.0)

Fri, 15 Mar 2024 09:47:29 GMT

Dependency Bumps
- envoy-gloo/solo-io has been upgraded to 1.26.7-patch2.

v1.15.23 (v1.15.0)

Tue, 13 Feb 2024 19:36:18 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.26.7-patch1.
Fixes
- Add the option to allow retries for gRPC Passthrough Auth in case the service is unavailable. This can be configured via the new `retryPolicy` in the PassThroughGrpc AuthConfig. (https://github.com/solo-io/gloo/issues/6804)
- Expose the `global.istioIntegration.AppendXForwardedHost` Helm value to allow users to toggle off the appending of
- Expose a new ratelimit option `grpcService.authority` to configure the authority header for the ratelimit gRPC call. (https://github.com/solo-io/gloo/issues/8995)

v1.15.22 (v1.15.0)

Wed, 31 Jan 2024 15:26:03 GMT

v1.15.21 (v1.15.0)

Tue, 23 Jan 2024 14:11:18 GMT

Helm Changes
- Updates to helper functions to recognize `sds-ee` images as fips-suppported (https://github.com/solo-io/gloo/issues/8909)

v1.15.20 (v1.15.0)

Mon, 22 Jan 2024 18:15:54 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.26.5-patch2.
Fixes
- Introduces a new Enterprise setting `settings.observabilityOptions.grafanaIntegration.dashboardPrefix` that specifies the prefix for the title and UID of Grafana Dashboards created. It is restricted to 20 characters in length. This is useful when the data is aggregated to a central grafana instance so they do not conflict across multiple Gloo environments. Note that any dashboard created without a prefix or with a different prefix will need to be manually removed on changing this value. (https://github.com/solo-io/gloo/issues/9022)
- Introduces a new Enterprise setting `gloo.settings.observabilityOptions.grafanaIntegration.extraMetricQueryParameters` that specifies additional query parameters to add to all metric query definitions in the Grafana dashboards generated by gloo. It is a string and can consist of multiple query parameters separated by a comma. For example `cluster="some-cluster",gateway_proxy_id="proxy-2"`. (https://github.com/solo-io/gloo/issues/9016)
- Add missing required runtime key for aggression in slow start config. (https://github.com/solo-io/gloo/pull/9031)

v1.15.19 (v1.15.0)

Wed, 03 Jan 2024 18:54:25 GMT

v1.15.18 (v1.15.0)

Tue, 19 Dec 2023 16:56:07 GMT

Dependency Bumps
- linux/alpine has been upgraded to 3.17.6.
- solo-io/cloud-builders has been upgraded to 0.7.1.
- golang.org/crypto has been upgraded to v0.17.0.

v1.15.17 (v1.15.0)

Tue, 28 Nov 2023 20:39:03 GMT

Extra Notes
- This release contained no user-facing changes.

v1.15.16 (v1.15.0)

Fri, 10 Nov 2023 17:02:53 GMT

Dependency Bumps
- solo-io/cloud-builders has been upgraded to v0.6.8.
- x/net has been upgraded to v0.18.0.
- google/go has been upgraded to 1.20.11.
Fixes
- Fixes the issue of defining a custom readiness probe for the gateway proxy for zero downtime upgrades via helm with the `--wait` flag and via ArgoCD. (https://github.com/solo-io/gloo/issues/8288)
Helm Changes
- Adds a new helm value `global.extraCustomResources` to allow users to add additional custom resources to create, as defined by a helm partial (https://github.com/solo-io/solo-projects/issues/5490)

v1.15.15 (v1.15.0)

Tue, 31 Oct 2023 16:47:55 GMT

Dependency Bumps
- golang.org/grpc has been upgraded to 1.59.0.
- jhump/protoreflect has been upgraded to v1.15.3.

v1.15.14 (v1.15.0)

Fri, 20 Oct 2023 21:43:09 GMT

Extra Notes
- This release contained no user-facing changes.

v1.15.13 (v1.15.0)

Fri, 20 Oct 2023 19:47:36 GMT

Fixes
- Make cert rotation more resilient against downtime when mTLS is enabled, by updating the certs in stages and waiting for changes to propagate. A new helm value `gateway.certGenJob.rotationDuration` (default 65s) can be used the configure the duration to wait for each stage of cert rotation to complete. This value must be tuned according to the performance of the specific environment in which the jobs are run. (https://github.com/solo-io/solo-projects/issues/5252)
- Certgen job will now renew existing certificate if it is expiring soon (90d by default). (https://github.com/solo-io/gloo/issues/5944)
- Unfortunately, the custom readiness probe fix causes issues in deployments via Argo, since the resouce-rollout job is deleted and causes the argo app to go out of sync, as well as missing permissions to watch jobs. Reverted this fix (https://github.com/solo-io/gloo/issues/8809)
Helm Changes
- Add new certgen CronJob if validation webhook is enabled (https://github.com/solo-io/gloo/issues/5944)
- Add an option to enable `force-rotation` flag for certgen job (https://github.com/solo-io/gloo/issues/5944)

v1.15.12 (v1.15.0)

Fri, 13 Oct 2023 18:39:07 GMT

Fixes
- Gloo now supports local limiting. This restricts the rate of connections per gateway, virtual host or route using envoy's own local rate limit filter, thus no longer requiring the need for an external rate limit server. This includes both the network and http local rate limit filter. (https://github.com/solo-io/gloo/issues/7428)

v1.15.11 (v1.15.0)

Thu, 12 Oct 2023 17:31:31 GMT

Dependency Bumps
- solo-io/cloud-builders has been upgraded to v0.6.5.
- solo-io/envoy-gloo has been upgraded to v1.26.5-patch1.
- solo-io/go-control-plane-fork-v2 has been upgraded to v0.11.1/forked-extproc.
Fixes
- Remove the Envoy cluster from the error log when validating clusters, avoiding the exposure of sensitive data (secrets). (https://github.com/solo-io/gloo/issues/8592)
- **IMPORTANT**: `Secret` deletions are now being validated. This _could_ cause a slight performance degradation when deleting Secrets. To opt-out, add `'secrets'` to `gateway.validation.webhook.skipDeleteValidationResources`. (https://github.com/solo-io/gloo/issues/8001)
- Exposes cluster option for preconnect policy. Explicitly scoped to just upstreams as this is RARELY a good feature to use. (https://github.com/solo-io/solo-projects/issues/5411)
Helm Changes
- Adds the helm value `gateway.rolloutJob.timeout` to specifiy the timeout to wait for the resource rollout job to complete. (https://github.com/solo-io/gloo/issues/8782)

v1.15.10 (v1.15.0)

Tue, 10 Oct 2023 18:56:53 GMT

Fixes
- Fixes the issue of defining a custom readiness probe for the gateway proxy for zero downtime upgrades via helm with the `--wait` flag. (https://github.com/solo-io/gloo/issues/8288)
Helm Changes
- Changes the default value of `gateway.rolloutJob.ttlSecondsAfterFinished` from 60 to 300 to accomodate the fix for the aforementioned custom readiness probe issue. (https://github.com/solo-io/gloo/issues/8288)

v1.15.9 (v1.15.0)

Thu, 05 Oct 2023 17:39:59 GMT

v1.15.8 (v1.15.0)

Tue, 03 Oct 2023 17:28:11 GMT

v1.15.7 (v1.15.0)

Tue, 26 Sep 2023 17:43:37 GMT

Extra Notes
- This release contained no user-facing changes.

v1.15.6 (v1.15.0)

Thu, 21 Sep 2023 19:08:06 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.26.4-patch3.
Fixes
- Add support for `most_specific_header_mutations_wins` to allow the more specific header mutation to win. Toggling it on would reverse the evaluation order of the header mutations, allowing more specific header mutations to overwrite less specific.
- Support role chaining using EKS ServiceAccounts outside of us-east-1 (https://github.com/solo-io/gloo/issues/8578)
Helm Changes
- Fix TTL not being respected on Helm hook jobs due to deletion policy. (https://github.com/solo-io/gloo/issues/8500)

v1.15.5 (v1.15.0)

Mon, 11 Sep 2023 20:49:23 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.26.4-patch2.
- solo-io/go-control-plane-fork-v2 has been upgraded to v0.11.1.
- solo-io/k8s-utils has been upgraded to v0.5.1.
Helm Changes
- Fix syntax error in Gateway yaml when using kube overrides. (https://github.com/solo-io/gloo/issues/8648)

v1.15.4 (v1.15.0)

Wed, 06 Sep 2023 19:06:06 GMT

Fixes
- Add field to ExtAuth API's OIDC AuthorizationCode plugin to eventually support mapping claims to headers. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10589)

v1.15.3 (v1.15.0)

Tue, 05 Sep 2023 15:18:13 GMT

v1.15.2 (v1.15.0)

Thu, 31 Aug 2023 16:56:35 GMT

Dependency Bumps
- sigs.k8s.io/controller-runtime has been upgraded to v0.15.2.
Fixes
- Prevent error when modifying settings by making sure loggers get initialized. (https://github.com/solo-io/gloo/issues/8627)
Helm Changes
- Added PodDisruptionBudget helm values for the gloo deployment (https://github.com/solo-io/gloo/issues/8445)

v1.15.1 (v1.15.0)

Tue, 22 Aug 2023 20:04:34 GMT

Fixes
- Expose the ability to overwrite headers in HTTP Passthrough Auth with the added allowedUpstreamHeaderToOverwrite field. (https://github.com/solo-io/gloo/issues/8477)

v1.15.0 (v1.15.0)

Mon, 21 Aug 2023 19:40:06 GMT

Extra Notes
- This release contained no user-facing changes.

v1.15.0-rc5 (v1.15.0)

Fri, 18 Aug 2023 17:59:26 GMT

v1.15.0-rc4 (v1.15.0)

Tue, 15 Aug 2023 19:21:59 GMT

v1.15.0-rc3 (v1.15.0)

Mon, 07 Aug 2023 17:02:05 GMT

Extra Notes
- This release contained no user-facing changes.

v1.15.0-rc2 (v1.15.0)

Fri, 04 Aug 2023 21:13:11 GMT

Extra Notes
- This release contained no user-facing changes.

v1.15.0-rc1 (v1.15.0)

Fri, 04 Aug 2023 13:58:06 GMT

Extra Notes
- This release contained no user-facing changes.

v1.15.0-beta24 (v1.15.0)

Tue, 01 Aug 2023 20:32:06 GMT

Breaking Changes
- Update Kubernetes API to 1.27 (https://github.com/solo-io/gloo/issues/8214)
Dependency Bumps
- solo-io/go-utils has been upgraded to v0.24.6.
- solo-io/k8s-utils has been upgraded to v0.5.0.
- solo-io/skv2 has been upgraded to v0.32.0.
- solo-io/solo-apis has been upgraded to sa-k8s-1.27-bump.
- solo-io/solo-kit has been upgraded to v0.33.0.
- k8s.io/api has been upgraded to v0.27.3.
- k8s.io/apiextensions-apiserver has been upgraded to v0.27.3.
- k8s.io/apimachinery has been upgraded to v0.27.3.
- k8s.io/client-go has been upgraded to v0.27.3.
- k8s.io/code-generator has been upgraded to v0.27.3.
- k8s.io/component-base has been upgraded to v0.27.3.
- k8s.io/kubectl has been upgraded to v0.27.3.
- k8s.io/kube-openapi has been upgraded to v0.0.0-20230501164219-8b0f38b5fd1f.
- k8s.io/metrics has been upgraded to v0.27.3.
- k8s.io/utils has been upgraded to v0.0.0-20230220204549-a5ecb0141aa5.
- sigs.k8s.io/controller-runtime has been upgraded to v0.15.0.
New Features
- Adds the ability to pass `initial_metadata` while configuring a GrpcHealthCheck. It specifies a list of key-value pairs that should be added to the metadata of each GRPC call that is sent to the health checked cluster. (https://github.com/solo-io/gloo/issues/8490)

v1.15.0-beta23 (v1.15.0)

Fri, 28 Jul 2023 18:38:18 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.26.3-patch2.
- solo-io/envoy-gloo has been upgraded to v1.26.4-patch1.
- solo-io/k8s-utils has been upgraded to v0.4.1.
Fixes
- Fix typo in helm template when rendering multiple Gateways. (https://github.com/solo-io/gloo/issues/8404)
New Features
- Add option to preserve escaped characters within an entire TransformationTemplate and a new Inja function for fine-grained control within a template. (https://github.com/solo-io/solo-projects/issues/5155)
- Gloo now supports connection limiting. This restricts the number of active connections per gateway. Useful to protect resources, ensure fair share of resources across gateways, and prevent DoS attacks. Both HTTP and TCP Gateways can now be configured via the `options.ConnectionLimit` parameter to restrict the number of active connections and wait for an optional delay before closing them. This is based off the envoy Connection Limit Filter (https://www.envoyproxy.io/docs/envoy/latest/configuration/listeners/network_filters/connection_limit_filter) (https://github.com/solo-io/gloo/issues/7428)
- Add an environment variable "HEADER_SECRET_REF_NS_MATCHES_US" that when set in the gloo pod requires that secrets sent in headers to an upstream are in the same namespace as that upstream. This defaults to false and when it is not set, resources can be in any namespaces watched by Gloo. (https://github.com/solo-io/solo-projects/issues/5007)

v1.15.0-beta22 (v1.15.0)

Wed, 19 Jul 2023 21:10:32 GMT

Extra Notes
- This release contained no user-facing changes.

v1.15.0-beta21 (v1.15.0)

Fri, 14 Jul 2023 20:08:16 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.26.2-patch3.
- envoyproxy/go-control-plane has been upgraded to v0.11.1.
- envoyproxy/protoc-gen-validate has been upgraded to v1.0.1.
- google.golang.org/grpc has been upgraded to v1.55.0.
- google.golang.org/protobuf has been upgraded to v1.30.0.
Fixes
- When modifying gateways that depend on TCP upstreams that do not exist, report these validation issues not as errors, but as warnings instead (https://github.com/solo-io/solo-projects/issues/5163)
New Features
- Use later version of Inja for transformations (Version 3.4) which provides access to numerous new templating features. (https://github.com/solo-io/gloo/issues/8177)

v1.14.32 (v1.14.0)

Tue, 01 Oct 2024 17:42:04 GMT

Fixes
- Fix a bug that caused discovered Upstreams to not reflect the updated state of parent Services discovered using watchLabels (https://github.com/solo-io/gloo/issues/8635)
- Fix a bug where the service and function names of a discovered gRPC service are not printed in JSON and YAML
- Infer the gloo deployment name in cases where the deployment name is not the default `gloo`. The gloo deployment is identified by the `gloo=gloo` label. (https://github.com/solo-io/gloo/issues/9163)
- Fix a bug where the service and function names of a discovered gRPC service are not printed when running glooctl get upstreams (https://github.com/solo-io/gloo/issues/9644)

v1.14.31 (v1.14.0)

Fri, 28 Jun 2024 14:50:28 GMT

Dependency Bumps
- bitnami/kubectl has been upgraded to 1.27.15.
- solo-io/cloud-builders has been upgraded to v0.7.7.

v1.14.30 (v1.14.0)

Thu, 09 May 2024 15:16:07 GMT

Dependency Bumps
- bitnami/kubectl has been upgraded to 1.27.13.
- solo-io/cloud-builders has been upgraded to 0.7.6.

v1.14.29 (v1.14.0)

Sun, 11 Feb 2024 20:28:49 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.25.10-patch2.
Fixes
- Add missing required runtime key for aggression in slow start config. (https://github.com/solo-io/gloo/pull/9031)
- Expose a new ratelimit option `grpcService.authority` to configure the authority header for the ratelimit gRPC call. (https://github.com/solo-io/gloo/issues/8995)

v1.14.28 (v1.14.0)

Tue, 19 Dec 2023 16:56:18 GMT

Dependency Bumps
- solo-io/cloud-builders has been upgraded to v0.6.8.
- x/net has been upgraded to v0.18.0.
- google/go has been upgraded to 1.20.11.
- linux/alpine has been upgraded to 3.17.6.
- solo-io/cloud-builders has been upgraded to 0.7.1.
- golang.org/crypto has been upgraded to v0.17.0.

v1.14.27 (v1.14.0)

Fri, 10 Nov 2023 17:04:50 GMT

Fixes
- Fixes the issue of defining a custom readiness probe for the gateway proxy for zero downtime upgrades via helm with the `--wait` flag and via ArgoCD. (https://github.com/solo-io/gloo/issues/8288)
Helm Changes
- Adds a new helm value `global.extraCustomResources` to allow users to add additional custom resources to create, as defined by a helm partial (https://github.com/solo-io/solo-projects/issues/5490)

v1.14.26 (v1.14.0)

Tue, 31 Oct 2023 16:57:22 GMT

Dependency Bumps
- golang.org/grpc has been upgraded to 1.59.0.
- jhump/protoreflect has been upgraded to v1.15.3.
Fixes
- Certgen job will now renew existing certificate if it is expiring soon (90d by default). (https://github.com/solo-io/gloo/issues/5944)
Helm Changes
- Add new certgen CronJob if validation webhook is enabled (https://github.com/solo-io/gloo/issues/5944)
- Add an option to enable `force-rotation` flag for certgen job (https://github.com/solo-io/gloo/issues/5944)

v1.14.25 (v1.14.0)

Thu, 26 Oct 2023 12:32:14 GMT

Extra Notes
- This release contained no user-facing changes.

v1.14.24 (v1.14.0)

Fri, 20 Oct 2023 15:48:16 GMT

Fixes
- Unfortunately, the custom readiness probe fix causes issues in deployments via Argo, since the resouce-rollout job is deleted and causes the argo app to go out of sync, as well as missing permissions to watch jobs. Reverted this fix (https://github.com/solo-io/gloo/issues/8809)

v1.14.23 (v1.14.0)

Wed, 11 Oct 2023 21:08:36 GMT

Dependency Bumps
- solo-io/cloud-builders has been upgraded to v0.6.5.
- solo-io/envoy-gloo has been upgraded to v1.25.10-patch1.
Fixes
- Remove the Envoy cluster from the error log when validating clusters, avoiding the exposure of sensitive data (secrets). (https://github.com/solo-io/gloo/issues/8592)
Helm Changes
- Adds the helm value `gateway.rolloutJob.timeout` to specifiy the timeout to wait for the resource rollout job to complete. (https://github.com/solo-io/gloo/issues/8782)

v1.14.22 (v1.14.0)

Tue, 10 Oct 2023 18:37:45 GMT

Fixes
- This ensures that a new deployment is rolled if the configmap it references changes. This is done by adding a `checksum/` annotation on any deployment that uses a configmap as a container volume. (https://github.com/solo-io/gloo/issues/8392)
- Fixes the issue of defining a custom readiness probe for the gateway proxy for zero downtime upgrades via helm with the `--wait` flag. (https://github.com/solo-io/gloo/issues/8288)
- Fix istio-proxy container definition in gateway-proxy template Add new e2e tests that handles Istio SDS case, ensuring mTLS occurs as expected (https://github.com/solo-io/gloo/issues/8092)
Helm Changes
- Changes the default value of `gateway.rolloutJob.ttlSecondsAfterFinished` from 60 to 300 to accomodate the fix for the aforementioned custom readiness probe issue. (https://github.com/solo-io/gloo/issues/8288)

v1.14.21 (v1.14.0)

Tue, 26 Sep 2023 17:13:21 GMT

Extra Notes
- This release contained no user-facing changes.

v1.14.20 (v1.14.0)

Thu, 21 Sep 2023 19:15:56 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.25.9-patch2.
Fixes
- Add support for `most_specific_header_mutations_wins` to allow the more specific header mutation to win. Toggling it on would reverse the evaluation order of the header mutations, allowing more specific header mutations to overwrite less specific.
- Support role chaining using EKS ServiceAccounts outside of us-east-1 (https://github.com/solo-io/gloo/issues/8578)
Helm Changes
- Fix TTL not being respected on Helm hook jobs due to deletion policy. (https://github.com/solo-io/gloo/issues/8500)

v1.14.19 (v1.14.0)

Fri, 08 Sep 2023 18:20:24 GMT

Dependency Bumps
- solo-io/k8s-utils has been upgraded to v0.3.3.
Helm Changes
- Fix syntax error in Gateway yaml when using kube overrides. (https://github.com/solo-io/gloo/issues/8648)
- Added PodDisruptionBudget helm values for the gloo deployment (https://github.com/solo-io/gloo/issues/8445)

v1.14.18 (v1.14.0)

Tue, 22 Aug 2023 14:52:53 GMT

Fixes
- Add fields to the API to allow Envoy to set x-fowarded-host and x-forwarded-post headers. (https://github.com/solo-io/gloo/issues/7683)

v1.14.17 (v1.14.0)

Fri, 18 Aug 2023 19:52:00 GMT

v1.14.16 (v1.14.0)

Wed, 16 Aug 2023 19:56:20 GMT

Extra Notes
- This release contained no user-facing changes.

v1.14.15 (v1.14.0)

Tue, 15 Aug 2023 19:22:19 GMT

v1.14.14 (v1.14.0)

Tue, 01 Aug 2023 21:03:23 GMT

Fixes
- Adds the ability to pass `initial_metadata` while configuring a GrpcHealthCheck. It specifies a list of key-value pairs that should be added to the metadata of each GRPC call that is sent to the health checked cluster. (https://github.com/solo-io/gloo/issues/8490)

v1.14.13 (v1.14.0)

Fri, 28 Jul 2023 19:31:47 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.25.9-patch1.
- solo-io/k8s-utils has been upgraded to v0.3.2.
Fixes
- Pulls in upstream Envoy v1.25.9-patch1, which resolves CVE-2023-35941, CVE-2023-35942, CVE-2023-35944, and CVE-2023-35945 (https://github.com/solo-io/solo-projects/issues/5138)
- Fix typo in helm template when rendering multiple Gateways. (https://github.com/solo-io/gloo/issues/8404)
- Add an environment variable "HEADER_SECRET_REF_NS_MATCHES_US" that when set in the gloo pod requires that secrets sent in headers to an upstream are in the same namespace as that upstream. This defaults to false and when it is not set, resources can be in any namespaces watched by Gloo. (https://github.com/solo-io/solo-projects/issues/5007)

v1.14.2 (v1.14.0)

Tue, 02 May 2023 21:07:23 GMT

Fixes
- Adds regex validation to gloo.solo.io.RouteOptions.prefixRewrite and gloo.solo.io.RouteOptions.hostRewritePathRegex to prevent leaking invalid regex to envoy (https://github.com/solo-io/gloo/issues/8091)
- Added the ability to create EncryptionSecrets via `glooctl create secret`. (https://github.com/solo-io/gloo/issues/8094)
New Features
- Expose Envoy's OCSP Stapling support through two new fields: `ocsp_staple` and `ocsp_staple_policy`. OCSP responses can be stored in TLS secrets through `glooctl create secret tls`, or by manually storing the OCSP response in a k8s tls secret under the `data` field: `tls.ocsp-staple`. The `tls.ocsp-staple` secret field name is subject to change, and is currently based off of the naming used by cert-manager in this [WIP PR](https://github.com/cert-manager/cert-manager/pull/5830). (https://github.com/solo-io/gloo/issues/5605)

v1.14.1 (v1.14.0)

Fri, 28 Apr 2023 16:39:45 GMT

Dependency Bumps
- bitnami/kubectl has been upgraded to 1.25.9.
- solo-io/envoy-gloo has been upgraded to v1.25.6-patch1.

v1.14.0 (v1.14.0)

Thu, 27 Apr 2023 10:38:17 GMT

Extra Notes
- This release contained no user-facing changes.

v1.14.0-rc2 (v1.14.0)

Mon, 10 Apr 2023 23:52:53 GMT

Fixes
- To give users time to migrate, discovery does not overwrite the old gRPC upstream API with the new one. (https://github.com/solo-io/gloo/issues/7983)

v1.13.39 (v1.13.0)

Thu, 04 Jul 2024 02:03:23 GMT

v1.13.38 (v1.13.0)

Fri, 28 Jun 2024 14:50:06 GMT

Dependency Bumps
- solo-io/cloud-builders has been upgraded to v0.7.7.

v1.13.37 (v1.13.0)

Thu, 09 May 2024 15:15:35 GMT

Dependency Bumps
- solo-io/cloud-builders has been upgraded to 0.7.6.

v1.13.36 (v1.13.0)

Mon, 12 Feb 2024 22:57:48 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.23.12-patch4.
Fixes
- Add missing required runtime key for aggression in slow start config. (https://github.com/solo-io/gloo/pull/9031)
- Expose a new ratelimit option `grpcService.authority` to configure the authority header for the ratelimit gRPC call. (https://github.com/solo-io/gloo/issues/8995)

v1.13.35 (v1.13.0)

Tue, 19 Dec 2023 16:57:19 GMT

Dependency Bumps
- golang.org/crypto has been upgraded to v0.17.0.

v1.13.34 (v1.13.0)

Tue, 12 Dec 2023 21:29:56 GMT

Dependency Bumps
- alpine/alpine has been upgraded to 3.17.6.
- solo-io/cloud-builders has been upgraded to 0.7.1.

v1.13.33 (v1.13.0)

Fri, 17 Nov 2023 18:15:53 GMT

Dependency Bumps
- golang.org/grpc has been upgraded to 1.58.3.
- jhump/protoreflect has been upgraded to v1.15.1.
- solo-io/cloud-builders has been upgraded to v0.6.8.
- x/net has been upgraded to v0.18.0.
- google/go has been upgraded to 1.20.11.

v1.13.32 (v1.13.0)

Fri, 10 Nov 2023 17:05:12 GMT

v1.13.31 (v1.13.0)

Thu, 26 Oct 2023 12:32:25 GMT

Extra Notes
- This release contained no user-facing changes.

v1.13.30 (v1.13.0)

Fri, 20 Oct 2023 15:48:30 GMT

v1.13.29 (v1.13.0)

Thu, 12 Oct 2023 17:51:51 GMT

Dependency Bumps
- envoy-gloo/solo-io has been upgraded to v1.23.12-patch3.
- solo-io/cloud-builders has been upgraded to v0.6.5.
Fixes
- Remove the Envoy cluster from the error log when validating clusters, avoiding the exposure of sensitive data (secrets). (https://github.com/solo-io/gloo/issues/8592)
Helm Changes
- Adds the helm value `gateway.rolloutJob.timeout` to specifiy the timeout to wait for the resource rollout job to complete. (https://github.com/solo-io/gloo/issues/8782)

v1.13.28 (v1.13.0)

Tue, 10 Oct 2023 18:37:53 GMT

v1.13.27 (v1.13.0)

Fri, 22 Sep 2023 19:18:18 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.23.12-patch2.
Fixes
- Support role chaining using EKS ServiceAccounts outside of us-east-1 (https://github.com/solo-io/gloo/issues/8578)
Helm Changes
- Fix TTL not being respected on Helm hook jobs due to deletion policy. (https://github.com/solo-io/gloo/issues/8500)

v1.13.26 (v1.13.0)

Fri, 08 Sep 2023 18:27:09 GMT

Dependency Bumps
- solo-io/k8s-utils has been upgraded to v0.1.11.
Helm Changes
- Fix syntax error in Gateway yaml when using kube overrides. (https://github.com/solo-io/gloo/issues/8648)

v1.13.25 (v1.13.0)

Wed, 16 Aug 2023 20:00:38 GMT

Fixes
- Check for empty values in fields that are required by Envoy for RateLimitActions. Previously invalid config would be passed to Envoy. API reference: https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/route/v3/route_components.proto#config-route-v3-ratelimit-action. (https://github.com/solo-io/gloo/issues/8573)
- Added customInputResource unmarshalling logic to ValidatingAdmissionWebhook for RateLimitConfigs (https://github.com/solo-io/gloo/issues/8042)

v1.13.24 (v1.13.0)

Wed, 02 Aug 2023 18:38:26 GMT

Dependency Bumps
- golang/go has been upgraded to go1.20.
Fixes
- Bump golang to 1.20. This requires all plugins to be rebuilt. (https://github.com/solo-io/solo-projects/issues/5215)

v1.13.23 (v1.13.0)

Wed, 26 Jul 2023 00:26:07 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.23.12-patch1.
- solo-io/k8s-utils has been upgraded to v0.1.10.
Fixes
- Pulls in upstream Envoy v1.23.12, which includes fixes for CVE-2023-35941, CVE-2023-35942, CVE-2023-35944, and CVE-2023-35945. (https://github.com/solo-io/solo-projects/issues/5138)
- Fix typo in helm template when rendering multiple Gateways. (https://github.com/solo-io/gloo/issues/8404)

v1.13.16 (v1.13.0)

Thu, 27 Apr 2023 21:02:36 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.23.9-patch1.

v1.13.15 (v1.13.0)

Thu, 27 Apr 2023 19:02:37 GMT

Fixes
- Adding TLS support for extauth Grpc passthrough. (https://github.com/solo-io/gloo/issues/7663)

v1.13.14 (v1.13.0)

Fri, 21 Apr 2023 18:47:42 GMT

Extra Notes
- This release contained no user-facing changes.

v1.13.13 (v1.13.0)

Tue, 11 Apr 2023 14:52:30 GMT

Extra Notes
- This release contained no user-facing changes.

v1.13.12 (v1.13.0)

Thu, 06 Apr 2023 18:59:44 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to 1.23.7-patch1.
- alpine/alpine has been upgraded to 3.17.3.

v1.13.11 (v1.13.0)

Fri, 17 Mar 2023 19:32:22 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.23.3-patch3.
- solo-io/envoy-gloo has been upgraded to v1.23.3-patch2.
- golang.org/x/mod has been upgraded to v0.9.0.
- golang.org/x/tools has been upgraded to v0.7.0.
Fixes
- Speed up the istio integration plugin translation time by reading from the input snapshot instead of using an upstream client. (https://github.com/solo-io/gloo/issues/7960)

v1.13.10 (v1.13.0)

Fri, 10 Mar 2023 00:14:20 GMT

Dependency Bumps
- alpine/alpine has been upgraded to 3.17.2.

v1.13.9 (v1.13.0)

Fri, 03 Mar 2023 19:38:04 GMT

Dependency Bumps
- golang/go has been upgraded to v1.18.6.
Fixes
- Expose `config.core.v3.Cluster.SlowStartConfig` for `RoundRobin` and `LeastRequest` load balancers. Requires CRD update to be able to use. (https://github.com/solo-io/gloo/issues/7807)

v1.13.8 (v1.13.0)

Mon, 20 Feb 2023 20:34:04 GMT

Dependency Bumps
- alpine/alpine has been upgraded to 3.17.2.
New Features
- Extract the generated files from `ssl.proto` into their own go package. This is a breaking change. This *will not* affect the regular operation of `gloo`. Rather, it will impact consumers of the solo-apis repository, as paths will have changed. (https://github.com/solo-io/gloo/issues/7693)
- Allow configured DynamicForwardProxies to use TLS Origination (https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/cluster/v3/cluster.proto#envoy-v3-api-field-config-cluster-v3-cluster-transport-socket) via a newly exposed field: gateway.spec.httpGateway.options.dynamicForwardProxy.sslConfig (https://github.com/solo-io/gloo/issues/7693)

v1.13.7 (v1.13.0)

Mon, 13 Feb 2023 00:58:30 GMT

Fixes
- Use Pod IPs for headless services when the gloo deployment's `ENABLE_ISTIO_INTEGRATION` is `true`. (https://github.com/solo-io/gloo/issues/7491)
- Fix a bug where the validation webhook server on the gloo pod would still start even if the `VALIDATION_MUST_START` environment variable was `false`.
- Fix issue with wrong port being used with Istio integration and setting a different `TargetPort` than the `Port`. (https://github.com/solo-io/gloo/issues/7298)

v1.13.6 (v1.13.0)

Tue, 07 Feb 2023 16:32:03 GMT

Extra Notes
- This release contained no user-facing changes.

v1.13.5 (v1.13.0)

Thu, 02 Feb 2023 18:01:07 GMT

Fixes
- No longer fail validation when specifying query parameters on re-writes. (https://github.com/solo-io/gloo/issues/7715#issuecomment-1410014270)
Helm Changes
- Provide a helm template value `gatewayProxies.gatewayProxy.disableCoreDumps` which disables core dumps from being written in the event of an Envoy crash (https://github.com/solo-io/gloo/issues/7659)

v1.13.4 (v1.13.0)

Fri, 27 Jan 2023 21:12:57 GMT

Dependency Bumps
- solo-io/solo-kit has been upgraded to v0.30.9.
Fixes
- Exempt [dynamic forward proxies](https://www.solo.io/blog/dynamic-forward-proxy-with-gloo-edge/) from being auto-censure by enabling the [replaceInvalidRoutes](https://docs.solo.io/gloo-edge/latest/guides/traffic_management/configuration_validation/invalid_route_replacement/) feature (https://github.com/solo-io/gloo/issues/7668)
- Exempt http tunnels from being auto-censured by enabling the [replaceInvalidRoutes](https://docs.solo.io/gloo-edge/latest/guides/traffic_management/configuration_validation/invalid_route_replacement/) feature (https://github.com/solo-io/gloo/issues/7668)
- Fix for `argument list too long` errors from resource rollout job. The Gateway custom resource yaml is now stored in a ConfigMap. The resource rollout job mounts the ConfigMap as a file and applies the file, instead of applying the entire yaml inline. (https://github.com/solo-io/gloo/issues/7060)
- Upgrade to solo-kit version which fixes status reporting for multiple namespaces. (https://github.com/solo-io/solo-kit/issues/529)
Helm Changes
- Add backoffLimit, completions, manualSelector, and parallelism fields to k8s jobs. https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#job-v1-batch (https://github.com/solo-io/gloo/issues/7112)

v1.13.3 (v1.13.0)

Fri, 13 Jan 2023 19:18:58 GMT

Fixes
- Allow storing proto descriptors used for gRPC to JSON transcoding in a ConfigMap and referencing the ConfigMap from the Gateway options. (https://github.com/solo-io/gloo/issues/7495)
- Avoid `argument list too long` errors from resource rollout job by enabling getting proto descriptors from a ConfigMap instead of including the proto descriptor inline. (https://github.com/solo-io/gloo/issues/7060)
Helm Changes
- Adding `topologySpreadConstraints` to gateway-proxy. (https://github.com/solo-io/gloo/issues/7582)

v1.13.2 (v1.13.0)

Tue, 03 Jan 2023 15:08:57 GMT

Fixes
- Add route validation to reject and sanitize invalid paths.

v1.13.1 (v1.13.0)

Thu, 22 Dec 2022 19:29:54 GMT

Helm Changes
- Adding `gatewayProxies.gatewayProxy.podTemplate.extraInitContainers` and

v1.13.0 (v1.13.0)

Tue, 20 Dec 2022 22:06:21 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.26.0.
- solo-io/k8s-utils has been upgraded to v0.1.7.
Fixes
- Expose Envoy's opencensus plugin via Gloo. This extension is provided to enable W3C-compliant tracing metadata to be sent to a collector. Note that the Envoy extension has severe limitations which are documented in this feature, so users should take great care before enabling it. (https://github.com/solo-io/gloo/issues/7406)

v1.12.59 (v1.12.0)

Thu, 12 Oct 2023 17:43:15 GMT

Dependency Bumps
- envoy-gloo/solo-io has been upgraded to v1.23.12-patch3.
Fixes
- Remove the Envoy cluster from the error log when validating clusters, avoiding the exposure of sensitive data (secrets). (https://github.com/solo-io/gloo/issues/8592)
- Fix istio-proxy container definition in gateway-proxy template Add new e2e tests that handles Istio SDS case, ensuring mTLS occurs as expected (https://github.com/solo-io/gloo/issues/8092)

v1.12.58 (v1.12.0)

Tue, 25 Jul 2023 23:39:02 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.23.12-patch1.
Fixes
- Pulls in upstream Envoy v1.23.12, which includes fixes for CVE-2023-35941, CVE-2023-35942, CVE-2023-35944, and CVE-2023-35945. (https://github.com/solo-io/solo-projects/issues/5138)

v1.12.53 (v1.12.0)

Thu, 27 Apr 2023 22:18:48 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.23.9-patch1.

v1.12.52 (v1.12.0)

Fri, 21 Apr 2023 18:48:00 GMT

Extra Notes
- This release contained no user-facing changes.

v1.12.51 (v1.12.0)

Fri, 07 Apr 2023 17:03:36 GMT

Extra Notes
- This release contained no user-facing changes.

v1.12.50 (v1.12.0)

Thu, 06 Apr 2023 18:11:23 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to 1.23.7-patch1.
- alpine/alpine has been upgraded to 3.17.3.

v1.12.49 (v1.12.0)

Wed, 15 Mar 2023 14:42:27 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.23.3-patch2.
- golang.org/x/mod has been upgraded to v0.9.0.
- golang.org/x/tools has been upgraded to v0.7.0.
Fixes
- Speed up the istio integration plugin translation time by reading from the input snapshot instead of using an upstream client. (https://github.com/solo-io/gloo/issues/7960)

v1.12.48 (v1.12.0)

Thu, 09 Mar 2023 19:11:36 GMT

Dependency Bumps
- alpine/alpine has been upgraded to 3.17.2.

v1.12.47 (v1.12.0)

Fri, 03 Mar 2023 15:15:31 GMT

Dependency Bumps
- golang/go has been upgraded to v1.18.6.

v1.12.46 (v1.12.0)

Tue, 21 Feb 2023 20:16:35 GMT

Dependency Bumps
- alpine/alpine has been upgraded to 3.17.2.

v1.12.45 (v1.12.0)

Sun, 12 Feb 2023 21:02:23 GMT

v1.12.44 (v1.12.0)

Tue, 07 Feb 2023 20:00:50 GMT

Extra Notes
- This release contained no user-facing changes.

v1.12.43 (v1.12.0)

Thu, 02 Feb 2023 17:50:27 GMT

Dependency Bumps
- golang/x/net has been upgraded to v0.5.0.
Fixes
- No longer fail validation when specifying query parameters on re-writes. (https://github.com/solo-io/gloo/issues/7715#issuecomment-1410014270)
Helm Changes
- Provide a helm template value `gatewayProxies.gatewayProxy.disableCoreDumps` which disables core dumps from being written in the event of an Envoy crash (https://github.com/solo-io/gloo/issues/7659)

v1.12.42 (v1.12.0)

Fri, 27 Jan 2023 18:34:26 GMT

Dependency Bumps
- solo-io/solo-kit has been upgraded to v0.30.9.
Fixes
- Fix for `argument list too long` errors from resource rollout job. The Gateway custom resource yaml is now stored in a ConfigMap. The resource rollout job mounts the ConfigMap as a file and applies the file, instead of applying the entire yaml inline. (https://github.com/solo-io/gloo/issues/7060)
- Upgrade to solo-kit version which fixes status reporting for multiple namespaces. (https://github.com/solo-io/solo-kit/issues/529)
Helm Changes
- Add backoffLimit, completions, manualSelector, and parallelism fields to k8s jobs. https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#job-v1-batch (https://github.com/solo-io/gloo/issues/7112)

v1.12.41 (v1.12.0)

Fri, 13 Jan 2023 19:23:24 GMT

v1.12.40 (v1.12.0)

Tue, 03 Jan 2023 14:31:21 GMT

Fixes
- Expose the `circuitBreakers` settings field as a Helm chart value. (https://github.com/solo-io/gloo/issues/7316)
- Add route validation to reject and sanitize invalid paths.

v1.12.39 (v1.12.0)

Thu, 22 Dec 2022 19:21:12 GMT

Helm Changes
- Adding `gatewayProxies.gatewayProxy.podTemplate.extraInitContainers` and

v1.12.38 (v1.12.0)

Wed, 21 Dec 2022 20:46:53 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.26.0.
- solo-io/k8s-utils has been upgraded to v0.1.7.
- solo-io/go-utils has been upgraded to v0.22.4.

v1.12.37 (v1.12.0)

Fri, 16 Dec 2022 19:37:13 GMT

New Features
- Expose Envoy's opencensus plugin via Gloo. This extension is provided to enable W3C-compliant tracing metadata to be sent to a collector. Note that the Envoy extension has severe limitations which are documented in this feature, so users should take great care before enabling it. (https://github.com/solo-io/gloo/issues/7406)

v1.12.36 (v1.12.0)

Wed, 07 Dec 2022 17:03:13 GMT

New Features
- Update the Tracer plugin to support Envoy's OpenTelemetry filter: https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/trace/v3/opentelemetry.proto (https://github.com/solo-io/gloo/issues/7406)

v1.12.35 (v1.12.0)

Mon, 14 Nov 2022 21:12:45 GMT

Fixes
- Fix for issue where multiple routes defined for the same upstream would remove the UpstreamTlsContext associated with the tunneling cluster and all requests would be sent through the tunnel as http. (https://github.com/solo-io/gloo/issues/7313)

v1.11.58 (v1.11.0)

Fri, 28 Apr 2023 19:47:35 GMT

Dependency Bumps
- linux/alpine has been upgraded to 3.17.3.
- solo-io/envoy-gloo has been upgraded to v1.21.5-patch2.

v1.11.57 (v1.11.0)

Fri, 21 Apr 2023 18:48:19 GMT

Extra Notes
- This release contained no user-facing changes.

v1.11.56 (v1.11.0)

Fri, 07 Apr 2023 17:04:38 GMT

Extra Notes
- This release contained no user-facing changes.

v1.11.55 (v1.11.0)

Wed, 15 Mar 2023 14:06:41 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.21.5-patch1.
- golang.org/x/mod has been upgraded to v0.9.0.
- golang.org/x/tools has been upgraded to v0.7.0.

v1.11.54 (v1.11.0)

Thu, 09 Mar 2023 19:11:49 GMT

Extra Notes
- This release contained no user-facing changes.

v1.11.53 (v1.11.0)

Wed, 22 Feb 2023 15:41:06 GMT

Dependency Bumps
- alpine/alpine has been upgraded to 3.17.2.

v1.11.52 (v1.11.0)

Fri, 10 Feb 2023 21:45:11 GMT

Extra Notes
- This release contained no user-facing changes.

v1.11.51 (v1.11.0)

Thu, 02 Feb 2023 17:51:05 GMT

Fixes
- No longer fail validation when specifying query parameters on re-writes. (https://github.com/solo-io/gloo/issues/7715#issuecomment-1410014270)

v1.11.50 (v1.11.0)

Fri, 27 Jan 2023 19:09:21 GMT

v1.11.49 (v1.11.0)

Tue, 17 Jan 2023 16:04:00 GMT

Extra Notes
- This release contained no user-facing changes.

v1.11.48 (v1.11.0)

Wed, 11 Jan 2023 00:36:41 GMT

v1.11.47 (v1.11.0)

Tue, 03 Jan 2023 15:54:21 GMT

Fixes
- Expose the `circuitBreakers` settings field as a Helm chart value. (https://github.com/solo-io/gloo/issues/7316)
- Add route validation to reject and sanitize invalid paths.

v1.11.46 (v1.11.0)

Thu, 22 Dec 2022 18:21:27 GMT

Helm Changes
- Adding `gatewayProxies.gatewayProxy.podTemplate.extraInitContainers` and

v1.10.47 (v1.10.0)

Mon, 27 Mar 2023 23:50:45 GMT

Dependency Bumps
- linux/alpine has been upgraded to 3.17.2.

v1.10.46 (v1.10.0)

Wed, 15 Mar 2023 17:25:35 GMT

Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.21.5-patch1.
- golang.org/x/mod has been upgraded to v0.9.0.
- golang.org/x/tools has been upgraded to v0.7.0.

v1.10.45 (v1.10.0)

Fri, 10 Feb 2023 17:13:40 GMT

Dependency Bumps
- gopkg.in/yaml.v3 has been upgraded to v3.0.1.

v1.10.44 (v1.10.0)

Thu, 02 Feb 2023 21:32:42 GMT

Fixes
- No longer fail validation when specifying query parameters on re-writes. (https://github.com/solo-io/gloo/issues/7715#issuecomment-1410014270)

v1.10.43 (v1.10.0)

Wed, 11 Jan 2023 20:33:47 GMT

Fixes
- Fix issue with `istio-proxy` being set in `tolerations` by moving pod-level options (including `tolerations`) out of container configuration. (https://github.com/solo-io/gloo/issues/5665)
Helm Changes
- Move pod-level options outside of istio/sds container configuration. (https://github.com/solo-io/gloo/issues/5665)

v1.10.42 (v1.10.0)

Tue, 03 Jan 2023 14:56:39 GMT

Fixes
- Add route validation to reject and sanitize invalid paths.

v1.10.41 (v1.10.0)

Mon, 14 Nov 2022 17:57:56 GMT

v1.9.30 (v1.9.0)

Mon, 14 Nov 2022 17:26:18 GMT

v1.2.0 (v1.2.0)

Fri, 06 Dec 2019 05:44:46 GMT

Dependency Bumps
- envoyproxy/go-control-plane has been upgraded to v0.9.0.
- knative/serving has been upgraded to v0.10.0.
- solo-io/go-utils has been upgraded to v0.11.0.
- solo-io/reporting-client has been upgraded to v0.1.2.
- k8s.io/api has been upgraded to kubernetes-1.16.2.
- k8s.io/client-go has been upgraded to kubernetes-1.16.2.
- k8s.io/kubectl has been upgraded to kubernetes-1.16.2.
- k8s.io/apimachinery has been upgraded to kubernetes-1.16.2.
- k8s.io/apiextensions-apiserver has been upgraded to kubernetes-1.16.2.
- k8s.io/apiserver has been upgraded to kubernetes-1.16.2.
Fixes
- Fix a crash in Gloo that occurs when no kubeconfig is present
Helm Changes
- Move `gatewayProxies.NAME.kind.deployment.antiAffinity` Helm value out into `gatewayProxies.NAME.antiAffinity`, since it can be applied to both DaemonSets and Deployments. (https://github.com/solo-io/gloo/issues/1775)
- Added `hook-delete-policy` to clean up the validation webhook certificate generation job after it has successfully completed. (https://github.com/solo-io/gloo/issues/1732)
New Features
- Gloo Validation now always rejects resources which fail to unmarshal, even when strict validation is disabled. (https://github.com/solo-io/gloo/issues/1795)
- The Gloo Helm chart is now compatible with [Helm 3](https://helm.sh/blog/helm-3-released/). (https://github.com/solo-io/gloo/issues/1732)
- Refactor `glooctl` to make it compatible with the new Helm 3 chart format. `glooctl` now uses the new Helm 3 libraries and delegates the `install` and `uninstall` operations to the corresponding Helm functions to provide consistent behavior across different installation flows; for example, it is now possible to install Gloo using `glooctl` and uninstall it using Helm, or vice-versa (https://github.com/solo-io/gloo/issues/1732)
- Deprecated the `installConfig.installationId` Helm value to track the resources that belong to a Gloo installation. Helm keeps track of resources by storing release information in a Kubernetes Secret in the namespace Gloo was installed in (this is the default with Helm 3 and can be changed via the `HELM_DRIVER` environment variable). `glooctl install` and `glooctl uninstall` now take the same approach (under the hood the two commands now delegate to their counterparts in the Helm 3 libraries). (https://github.com/solo-io/gloo/issues/1635)
- Helm users can now easily install Gloo in `ingress` or `knative` mode by using value overrides. The Gloo Helm chart now packages a single values file instead of creating variants for `ingress` and `knative`. The values specific to those two installation modes have been merged into the default `values.yaml`, where they will be ignored when those two features are disabled (which is the default). To produce the manifests specific to the `ingress` and `knative` installations, users can now just disable the gateway and enable the desired component via Helm value overrides. (https://github.com/solo-io/gloo/issues/1732)
- Add advanced rule priority options to Gloo Enterprise rate limit API, which will be supported in the next 1.x Gloo Enterprise release. (https://github.com/solo-io/gloo/issues/1724)
- Add `virtual_service_namespaces` configuration to the `HttpGateway`, which allows `HttpGateway`s to reference `VirtualService`s outside of their own namespace using the label selector. The default behavior, which remains unchanged, is to restrict gateways to referencing virtual services in their own namespace. (https://github.com/solo-io/gloo/issues/1695)