Gloo Mesh Enterprise Release Feed

v2.14.0 (v2.14.0)

Wed, 09 Sep 2026 19:24:10 GMT

Extra Notes
- This release contained no user-facing changes.

v2.14.0-rc1 (v2.14.0)

Fri, 04 Sep 2026 03:12:06 GMT

Dependency Bumps
- k8s.io/api has been upgraded to v0.36.1.
- sigs.k8s.io/controller-runtime has been upgraded to v0.24.1.
- istio.io/api has been upgraded to v1.31.0-rc.0.
- istio.io/client-go has been upgraded to v1.31.0-rc.0.
- istio.io/istio has been upgraded to v1.31.0-rc.0-solo.
- solo-io/rate-limiter has been upgraded to v0.21.0.
- solo-io/ext-auth-service has been upgraded to v0.86.2.
- golang/go has been upgraded to v1.26.7.
- labstack/echo has been upgraded to v4.15.3.
- solo-io/istio has been upgraded to v1.28.10-patch0-solo.
- prometheus/prometheus has been upgraded to v3.13.2.
- spiffe/spire has been upgraded to v1.12.6.
New Features
- Add a new `gloo.solo.io/use-waypoint` label for ExternalServices and VirtualDestinations, with an optional `gloo.solo.io/use-waypoint-namespace` companion naming the namespace the waypoint lives in. When set, the ServiceEntries generated for that ExternalService or VirtualDestination carry the corresponding `istio.io/use-waypoint` and `istio.io/use-waypoint-namespace` labels, binding those destinations to the named waypoint so that traffic to them is sent through it. The labels can be set on the ExternalService or VirtualDestination or on its namespace, with the resource taking precedence. If no waypoint namespace is given, the namespace of the ExternalService or VirtualDestination is used. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21963)

v2.14.0-beta2 (v2.14.0)

Fri, 28 Aug 2026 22:36:27 GMT

Fixes
- Generated Gloo Mesh ClusterRoles no longer grant the wildcard verb ('*') on Secrets. Secrets are emitted as their own rule with an explicit verb list (create, delete, get, list, patch, update, watch). Every verb the product uses is still granted; only deletecollection, which no component calls, is dropped. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21947)
- ExternalServices with wildcard hosts now honor their `clientsideTls` settings when originating TLS **through an egress gateway**. `caCertificates` and client certificates were previously ignored, so an upstream requiring mTLS saw an anonymous connection with no error reported; they are now honored on ports that route through an egress gateway. Note that `mode: DISABLE` was also ignored on wildcard hosts and TLS was originated regardless; it is now respected, so a port that was only reaching an HTTPS-only upstream because of that will need its `clientsideTls` set to `SIMPLE`. Settings a wildcard host cannot support (`credentialName`, `ISTIO_MUTUAL`, a `targetPort` other than 443) are now reported as warnings on the ExternalService. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21937)
- Fixed `filter_chain_not_found` resets on traffic to a wildcard-host ExternalService routed through an egress gateway, caused by the client sidecar presenting an SNI the gateway didn't recognize. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21937)
- A VirtualGateway listener that exposes both a wildcard host and a concrete host it covers, for example `*.example.com` alongside `report.example.com`, now reports a warning. Which ExternalService serves the concrete host is not guaranteed, so it may be served with the other's TLS settings. Routing is unchanged. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21937)
- On a wildcard host, the `clientsideTls` certificate files (`caCertificates`, `clientCertificate`, `privateKey`) are only used when the port sends its traffic through an egress gateway. Set on any other wildcard port they are ignored, as they are today, and the ExternalService now says so: a warning for `caCertificates`, whose upstream is verified against the proxy's default trust bundle instead, and an error for `clientCertificate` and `privateKey`, which leave the connection anonymous. Traffic is unchanged by the upgrade -- remove the fields if the upstream uses a public CA and needs no client certificate, or route the port through an `egressGatewayRoutes` egress gateway to have them honored. Concrete hosts are unaffected. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21937)
New Features
- ExternalServices are now warned when the generated proxy configuration for a namespace approaches the Kubernetes object size limit. Only workspaces with a large number (1000+) of distinct `clientsideTls` configurations on wildcard hosts can reach it. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21937)

v2.14.0-beta1 (v2.14.0)

Fri, 21 Aug 2026 18:36:04 GMT

Dependency Bumps
- solo-io/otel-collector has been upgraded to v0.3.6.
- solo-io/rate-limiter has been upgraded to v0.18.7.
- solo-io/ext-auth-service has been upgraded to v0.81.2.
- containerd/containerd has been upgraded to v1.7.32.
- golang/go has been upgraded to v1.26.4.
- golang.org/x/crypto has been upgraded to v0.52.0.
- golang.org/x/net has been upgraded to v0.55.0.
- solo-io/rate-limiter has been upgraded to v0.18.8.
- solo-io/ext-auth-service has been upgraded to v0.82.1.
- solo-io/otel-collector has been upgraded to v0.3.7.
- solo-io/ext-auth-service has been upgraded to v0.82.2.
- solo-io/rate-limiter has been upgraded to v0.18.10.
- solo-io/otel-collector has been upgraded to v0.3.8.
- containerd/containerd has been upgraded to v1.7.33.
- alpine/openssl has been upgraded to 3.5.7-r0.
- solo-io/rate-limiter has been upgraded to v0.18.15.
- solo-io/otel-collector has been upgraded to v0.3.9.
- cert-manager/cert-manager has been upgraded to v1.15.4.
- docker.io/redis has been upgraded to 7.4.10-alpine.
- aws/aws-sdk-go-v2 has been upgraded to v1.88.5.
- cilium/cilium has been upgraded to v1.17.16.
- google/cel-go has been upgraded to v0.30.0.
- gopacket/gopacket has been upgraded to v1.6.1.
Fixes
- Make config distribution and GME policy API translation mutually exclusive. The management server will not start with both enabled. In helm, glooMgmtServer.policyApis.enabled and featureGates.ConfigDistribution (or featureGates.configDistribution) cannot both be true. Cloud resource discovery now additionaly requires that policy API translation be enabled. Fixes an issue that sometimes caused config distribution to fail to distribute resources to agent clusters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21798)
- Bump ext-auth-service to v0.84.0, which fixes an identity fail-open: when OAuth2
- This is a behavior change for upstreams that relied on the header being left absent (rather
- This is not recommended, since it re-enables the fail-open the fix addresses; only use it as a
- Fix JWTPolicy translation for gateways whose Service selector includes dotted label keys or values. Valid Kubernetes labels such as `mesh.example.com/channel` no longer cause JWTPolicies targeting the gateway to fail with an invalid workload key error. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21935)
- Add `retryPolicy` and `failedRefetchDuration` fields to JWTPolicy `remote` JWKS configuration. `retryPolicy` configures the number of retries and exponential backoff between retries when a JWKS fetch fails. When `enableAsyncFetch` is true, `failedRefetchDuration` controls how long Envoy waits after a failed fetch cycle before starting a new one. These knobs prevent the gateway from overwhelming a misconfigured or unavailable JWKS server with repeated requests. Defaults are unchanged: omitting both fields preserves Envoy's existing behavior of one retry with no backoff and a 1 second refetch interval. Note that this does not address two related findings from field investigation: each JWTPolicy provider produces a separate JWKS fetcher per listener (so N policies × M listeners result in N×M concurrent fetchers against the same URL), and any JWTPolicy mutation rebuilds the filter config, causing every fetcher to re-fetch on reload. Both are Envoy-side behaviors and require upstream changes to address. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21314)
- The bundled OTel collector now compiles in only the 33 components the product actually needs, instead of the roughly 200 it inherited from the upstream distribution, which also cuts its CVE surface. The image name and registry are unchanged, `gcr.io/gloo-mesh/otel-collector`, and a default install needs no action, because the chart's own pipelines only reference components that are still compiled in. If you added a component through `telemetryCollectorCustomization` or `telemetryGatewayCustomization` (`extraReceivers`, `extraProcessors`, `extraExporters`, `extraExtensions`, `extraPipelines`) and it is not in the list below, the collector fails config validation and crashloops on startup. Check your values before you upgrade. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20252)
- The components compiled into the collector are, extensions: `health_check`, `basicauth`, `bearertokenauth`. Receivers: `otlp`, `nop`, `prometheus`, `filelog`, `jaeger`, `zipkin`, `redis`. Processors: `batch`, `memory_limiter`, `resource`, `filter`, `transform`, `metricstransform`, `cumulativetodelta`, `attributes`, `k8sattributes`. Exporters: `otlp`, `otlphttp`, `debug`, `nop`, `prometheus`, `clickhouse`, `file`, `redisstream`, `datadog`, `elasticsearch`, `prometheusremotewrite`, `kafka`, `splunk_hec`, `awss3`. No connectors are compiled in, so a pipeline that uses one will not start. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20252)
- The collector image is now built and signed by the GME release pipeline, and its tag tracks the GME release version (for example `2.14.0`) instead of a separate `0.x.y` line. If you pin `telemetryCollector.image.tag` or `telemetryGateway.image.tag` to a collector version, set it to the GME version or remove the override to take the chart default. Mirrored and air-gapped installs keep the same repository path, but need the new tag mirrored. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20252)
- `gloo_metrics_processor` was not used by the product and is therefore no longer compiled in. Remove any reference to it from custom collector configuration. The helm value `telemetryCollectorCustomization.enableCloudMetadataProcessing` is gone for the same reason, and setting it now has no effect. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20252)
- If this build is missing a component you depend on, Solo publishes a wide image with the full upstream component set at `gcr.io/gloo-mesh/otel-collector:0.5.0`, on a `0.x.y` tag line kept separate from GME's `2.x.y` tags. Point `telemetryCollector.image.tag` or `telemetryGateway.image.tag` at it to unblock yourself. It is meant as a temporary fallback, so if you find you need it, please open a support ticket telling us which component you use, so we can understand the use case and decide what to compile into the GME collector. Note that the wide image is built on upstream contrib v0.158.0, which deleted ten components that GME shipped before 2.14 and so cannot restore them: the `carbon`, `loki`, `opencensus` and `sapm` exporters, the `bigip`, `jmx`, `opencensus` and `sapm` receivers, the `routing` processor, and the `ecstaskobserver` extension. `routing` has an upstream successor, `routingconnector`, which the wide image does have. For the rest, change your configuration. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20252)
New Features
- Added maxConnectionDuration to ConnectionPolicy's TCP config, allowing the maximum duration of upstream connections to be configured. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21999)
- Add support for connection pool configuration in the HTTP passthrough auth

v2.13.3 (v2.13.0)

Mon, 31 Aug 2026 19:58:32 GMT

Dependency Bumps
- solo-io/rate-limiter has been upgraded to v0.18.15.
- solo-io/otel-collector has been upgraded to v0.3.9.
- cert-manager/cert-manager has been upgraded to v1.15.4.
- docker.io/redis has been upgraded to 7.4.10-alpine.
- aws/aws-sdk-go-v2 has been upgraded to v1.88.5.
- cilium/cilium has been upgraded to v1.17.16.
- google/cel-go has been upgraded to v0.30.0.
- gopacket/gopacket has been upgraded to v1.6.1.
- solo-io/rate-limiter has been upgraded to v0.21.0.
- solo-io/ext-auth-service has been upgraded to v0.86.2.
- golang/go has been upgraded to v1.26.7.
- labstack/echo has been upgraded to v4.15.3.
- solo-io/istio has been upgraded to v1.28.10-patch0-solo.
- prometheus/prometheus has been upgraded to v3.13.2.
- spiffe/spire has been upgraded to v1.12.6.
Fixes
- Generated Gloo Mesh ClusterRoles no longer grant the wildcard verb ('*') on Secrets. Secrets are emitted as their own rule with an explicit verb list (create, delete, get, list, patch, update, watch). Every verb the product uses is still granted; only deletecollection, which no component calls, is dropped. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21947)
- Bump ext-auth-service to v0.84.0, which fixes an identity fail-open: when OAuth2
- This is a behavior change for upstreams that relied on the header being left absent (rather
- This is not recommended, since it re-enables the fail-open the fix addresses; only use it as a
- The bundled OTel collector now ships only the components GME requires,
- A full-component fallback image, `gcr.io/gloo-mesh/otel-collector:0.5.0`, is
- The bundled OTel collector now compiles in only the 33 components the product actually needs, instead of the roughly 200 it inherited from the upstream distribution, which also cuts its CVE surface. The image name and registry are unchanged, `gcr.io/gloo-mesh/otel-collector`, and a default install needs no action, because the chart's own pipelines only reference components that are still compiled in. If you added a component through `telemetryCollectorCustomization` or `telemetryGatewayCustomization` (`extraReceivers`, `extraProcessors`, `extraExporters`, `extraExtensions`, `extraPipelines`) and it is not in the list below, the collector fails config validation and crashloops on startup. Check your values before you upgrade. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20252)
- The components compiled into the collector are, extensions: `health_check`, `basicauth`, `bearertokenauth`. Receivers: `otlp`, `nop`, `prometheus`, `filelog`, `jaeger`, `zipkin`, `redis`. Processors: `batch`, `memory_limiter`, `resource`, `filter`, `transform`, `metricstransform`, `cumulativetodelta`, `attributes`, `k8sattributes`. Exporters: `otlp`, `otlphttp`, `debug`, `nop`, `prometheus`, `clickhouse`, `file`, `redisstream`, `datadog`, `elasticsearch`, `prometheusremotewrite`, `kafka`, `splunk_hec`, `awss3`. No connectors are compiled in, so a pipeline that uses one will not start. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20252)
- The collector image is now built and signed by the GME release pipeline, and its tag tracks the GME release version (for example `2.14.0`) instead of a separate `0.x.y` line. If you pin `telemetryCollector.image.tag` or `telemetryGateway.image.tag` to a collector version, set it to the GME version or remove the override to take the chart default. Mirrored and air-gapped installs keep the same repository path, but need the new tag mirrored. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20252)
- `gloo_metrics_processor` was not used by the product and is therefore no longer compiled in. Remove any reference to it from custom collector configuration. The helm value `telemetryCollectorCustomization.enableCloudMetadataProcessing` is gone for the same reason, and setting it now has no effect. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20252)
- If this build is missing a component you depend on, Solo publishes a wide image with the full upstream component set at `gcr.io/gloo-mesh/otel-collector:0.5.0`, on a `0.x.y` tag line kept separate from GME's `2.x.y` tags. Point `telemetryCollector.image.tag` or `telemetryGateway.image.tag` at it to unblock yourself. It is meant as a temporary fallback, so if you find you need it, please open a support ticket telling us which component you use, so we can understand the use case and decide what to compile into the GME collector. Note that the wide image is built on upstream contrib v0.158.0, which deleted ten components that GME shipped before 2.14 and so cannot restore them: the `carbon`, `loki`, `opencensus` and `sapm` exporters, the `bigip`, `jmx`, `opencensus` and `sapm` receivers, the `routing` processor, and the `ecstaskobserver` extension. `routing` has an upstream successor, `routingconnector`, which the wide image does have. For the rest, change your configuration. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20252)

v2.13.2 (v2.13.0)

Mon, 29 Jun 2026 18:58:53 GMT

Dependency Bumps
- solo-io/ext-auth-service has been upgraded to v0.82.2.
- solo-io/rate-limiter has been upgraded to v0.18.10.
- solo-io/otel-collector has been upgraded to v0.3.8.
- containerd/containerd has been upgraded to v1.7.33.
- alpine/openssl has been upgraded to 3.5.7-r0.
Fixes
- Fix JWTPolicy translation for gateways whose Service selector includes dotted label keys or values. Valid Kubernetes labels such as `mesh.example.com/channel` no longer cause JWTPolicies targeting the gateway to fail with an invalid workload key error. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21935)

v2.13.1 (v2.13.0)

Fri, 05 Jun 2026 17:42:12 GMT

Dependency Bumps
- golang/go has been upgraded to v1.26.4.
- golang.org/x/crypto has been upgraded to v0.52.0.
- golang.org/x/net has been upgraded to v0.55.0.
- solo-io/rate-limiter has been upgraded to v0.18.8.
- solo-io/ext-auth-service has been upgraded to v0.82.1.
- solo-io/otel-collector has been upgraded to v0.3.7.

v2.13.0 (v2.13.0)

Fri, 29 May 2026 18:52:13 GMT

Dependency Bumps
- solo-io/otel-collector has been upgraded to v0.3.6.
- solo-io/rate-limiter has been upgraded to v0.18.7.
- solo-io/ext-auth-service has been upgraded to v0.81.2.
- containerd/containerd has been upgraded to v1.7.32.
Fixes
- Make config distribution and GME policy API translation mutually exclusive. The management server will not start with both enabled. In helm, glooMgmtServer.policyApis.enabled and featureGates.ConfigDistribution (or featureGates.configDistribution) cannot both be true. Cloud resource discovery now also requires that policy API translation be enabled. Fixes an issue that sometimes caused config distribution to fail to distribute resources to agent clusters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21798)
- Add `retryPolicy` and `failedRefetchDuration` fields to JWTPolicy `remote` JWKS configuration. `retryPolicy` configures the number of retries and exponential backoff between retries when a JWKS fetch fails. When `enableAsyncFetch` is true, `failedRefetchDuration` controls how long Envoy waits after a failed fetch cycle before starting a new one. These knobs prevent the gateway from overwhelming a misconfigured or unavailable JWKS server with repeated requests. Defaults are unchanged: omitting both fields preserves Envoy's existing behavior of one retry with no backoff and a 1 second refetch interval. Note that this does not address two related findings from field investigation: each JWTPolicy provider produces a separate JWKS fetcher per listener (so N policies × M listeners result in N×M concurrent fetchers against the same URL), and any JWTPolicy mutation rebuilds the filter config, causing every fetcher to re-fetch on reload. Both are Envoy-side behaviors and require upstream changes to address. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21314)

v2.13.0-rc1 (v2.13.0)

Fri, 22 May 2026 18:02:44 GMT

Dependency Bumps
- istio.io/api has been upgraded to v1.30.0-rc.0.
- istio.io/client-go has been upgraded to v1.30.0-rc.0.
- istio.io/istio has been upgraded to v1.30.0-beta.2-solo.
- golang/go has been upgraded to v1.26.2.
- solo-io/rate-limiter has been upgraded to v0.18.5.
- solo-io/ext-auth-service has been upgraded to v0.80.1.
- solo-io/otel-collector has been upgraded to v0.3.5.
- open-telemetry/opentelemetry-go has been upgraded to v1.43.0.
- cilium/cilium has been upgraded to v1.17.15.
- prometheus/prometheus has been upgraded to v0.311.3.
- microsoft/kiota-http-go has been upgraded to v1.5.5.
- solo-io/ext-auth-service has been upgraded to v0.81.1.
- solo-io/rate-limiter has been upgraded to v0.18.6.
- golang/go has been upgraded to v1.26.1.
- solo-io/ext-auth-service has been upgraded to v0.74.1.
- solo-io/rate-limiter has been upgraded to v0.17.4.
- solo-io/otel-collector has been upgraded to v0.2.8.
- solo-io/istio has been upgraded to v1.28.5-solo.
Fixes
- Fix a dpanic that occurs when an Istio installation is configured with an empty trust domain. The trust domain is now defaulted to "cluster.local" at discovery time, matching Istio's own default behavior. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21619)
- Add the RedisDiffStreamCompression feature gate to improve scalability for clusters with very large output snapshots. When enabled, the management server compresses data written to the Redis diff stream, preventing connection limit errors caused by oversized payloads. This feature is disabled by default.
- Fix a bug where intermittent Kubernetes API server unavailability during discovery agent startup could leave some watched resource types with missing cluster identity, leading to incorrect gateway programming. The agent now retries when it cannot resolve all the resource types it needs to watch, and will fail to start (and be restarted by Kubernetes) if the API server remains unreachable, rather than coming up in a partially initialized state. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21668)
- Fix issue with auto-peering where istio-remote gateways were sometimes not propagated to remote clusters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21798)
- Fix extauth recovery when Passthrough service becomes unavailable (https://github.com/solo-io/gloo-mesh-enterprise/issues/21812)
- Fix a bug where enabling the RedisDiffStreamCompression feature gate caused wire format errors on the apiserver/UI pod when reading from the Redis diff stream. The feature gate is now honored by both the management server and the apiserver/UI when constructing their Redis persistence clients. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21629)
New Features
- Add the `meshctl get insights` command to retrieve insights from the Gloo Mesh API. The command supports filtering by severity, cluster, category, and insight code. Output can be formatted as a table, JSON, or CSV for easy export and analysis. Additionally, the UI now includes an export button on the insights page to download all filtered insights as a CSV file. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21817)
- Add a new `gloo.solo.io/disable-outputs` annotation for VirtualDestinations. When set to "true", all translated outputs (ServiceEntries, VirtualServices, WorkloadEntries) are suppressed for that VirtualDestination. Host conflict detection is preserved so that other VirtualDestinations targeting the same host are still validated correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21768)
- Add a new `solo.io/prefer-other-clusters` annotation as a companion to the existing `solo.io/prefer-other` annotation on VirtualDestinations. Its value is a comma-separated list of cluster names. When present, the prefer-other deprioritization behavior is scoped only to ServiceEntries generated for the listed clusters, rather than applying globally to all clusters. The annotation can be set on the VirtualDestination or its namespace, with the VirtualDestination value taking precedence. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21769)

v2.12.7 (v2.12.0)

Mon, 31 Aug 2026 20:42:06 GMT

v2.12.6 (v2.12.0)

Mon, 29 Jun 2026 18:59:10 GMT

v2.12.5 (v2.12.0)

Fri, 05 Jun 2026 17:42:29 GMT

v2.12.4 (v2.12.0)

Fri, 15 May 2026 18:11:49 GMT

Dependency Bumps
- golang/go has been upgraded to v1.26.2.
- solo-io/rate-limiter has been upgraded to v0.18.5.
- solo-io/ext-auth-service has been upgraded to v0.80.1.
- solo-io/otel-collector has been upgraded to v0.3.5.
- open-telemetry/opentelemetry-go has been upgraded to v1.43.0.
- cilium/cilium has been upgraded to v1.17.15.
- prometheus/prometheus has been upgraded to v0.311.3.
- microsoft/kiota-http-go has been upgraded to v1.5.5.
- solo-io/ext-auth-service has been upgraded to v0.81.1.
- solo-io/rate-limiter has been upgraded to v0.18.6.
Fixes
- Fix a bug where intermittent Kubernetes API server unavailability during discovery agent startup could leave some watched resource types with missing cluster identity, leading to incorrect gateway programming. The agent now retries when it cannot resolve all the resource types it needs to watch, and will fail to start (and be restarted by Kubernetes) if the API server remains unreachable, rather than coming up in a partially initialized state. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21668)
- Fix extauth recovery when Passthrough service becomes unavailable (https://github.com/solo-io/gloo-mesh-enterprise/issues/21812)
- Fix a bug where enabling the RedisDiffStreamCompression feature gate caused wire format errors on the apiserver/UI pod when reading from the Redis diff stream. The feature gate is now honored by both the management server and the apiserver/UI when constructing their Redis persistence clients. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21629)

v2.12.3 (v2.12.0)

Mon, 27 Apr 2026 18:09:04 GMT

Fixes
- Add the RedisDiffStreamCompression feature gate to improve scalability for clusters with very large output snapshots. When enabled, the management server compresses data written to the Redis diff stream, preventing connection limit errors caused by oversized payloads. This feature is disabled by default.

v2.12.2 (v2.12.0)

Fri, 27 Mar 2026 19:01:30 GMT

Fixes
- Add a new `gloo.solo.io/disable-outputs` annotation for VirtualDestinations. When set to "true", all translated outputs (ServiceEntries, VirtualServices, WorkloadEntries) are suppressed for that VirtualDestination. Host conflict detection is preserved so that other VirtualDestinations targeting the same host are still validated correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21768)
- Add a new `solo.io/prefer-other-clusters` annotation as a companion to the existing `solo.io/prefer-other` annotation on VirtualDestinations. Its value is a comma-separated list of cluster names. When present, the prefer-other deprioritization behavior is scoped only to ServiceEntries generated for the listed clusters, rather than applying globally to all clusters. The annotation can be set on the VirtualDestination or its namespace, with the VirtualDestination value taking precedence. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21769)

v2.12.1 (v2.12.0)

Fri, 13 Mar 2026 20:59:22 GMT

Dependency Bumps
- golang/go has been upgraded to v1.26.1.
- solo-io/ext-auth-service has been upgraded to v0.74.1.
- solo-io/rate-limiter has been upgraded to v0.17.4.
- solo-io/otel-collector has been upgraded to v0.2.8.
- solo-io/istio has been upgraded to v1.28.5-solo.

v2.12.0 (v2.12.0)

Tue, 24 Feb 2026 17:44:08 GMT

Extra Notes
- This release contained no user-facing changes.

v2.12.0-rc1 (v2.12.0)

Fri, 20 Feb 2026 19:58:05 GMT

Dependency Bumps
- alpine/alpine has been upgraded to 3.23.
- nginx/nginx has been upgraded to 1.29.4.
- golang/go has been upgraded to v1.25.7.
- solo-io/ext-auth-service has been upgraded to v0.74.0.
- solo-io/rate-limiter has been upgraded to v0.17.3.
- solo-io/otel-collector has been upgraded to v0.2.7.
- k8s.io/api has been upgraded to v0.35.0.
- k8s.io/client-go has been upgraded to v0.35.0.
- k8s.io/apimachinery has been upgraded to v0.35.0.
- sigs.k8s.io/controller-runtime has been upgraded to v0.22.3.
- istio.io/api has been upgraded to v1.29.0-rc.1.
- istio.io/client-go has been upgraded to v1.29.0-rc.1.
- istio.io/istio has been upgraded to v1.29.0-rc.1-solo.
Fixes
- Bump Istio proxy version in gloo-mesh-ui to fix CVE. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21609)
- Upgrade npm libraries to fix CVEs - qs, diff (https://github.com/solo-io/gloo-mesh-enterprise/issues/21690)
- Remove the CFG0052 "expected vs actual CRD count" insight. This insight checked the actual vs expected number of Istio CRDs installed,
Helm Changes
- Upgrade Prometheus Helm chart from version 27.25.0 to 28.9.1, which removes `nodes/proxy` permissions from the default
New Features
- Remove the Istio lifecycle manager entirely. This feature had previously been deprecated. Any existing Istio installations previously managed by the lifecycle manager will simply be abandoned in-place until manually removed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21315)

v2.12.0-beta1 (v2.12.0)

Fri, 23 Jan 2026 23:14:06 GMT

Dependency Bumps
- solo.io/licensing has been upgraded to v0.9.0.
- golang/go has been upgraded to v1.25.5.
- solo-io/ext-auth-service has been upgraded to v0.71.5.
- solo-io/rate-limiter has been upgraded to v0.16.5.
- solo-io/otel-collector has been upgraded to v0.2.6.
- solo-io/istio has been upgraded to v1.26.7-solo.
Fixes
- Do not log errors about missing nonexistent VirtualDestinations when using federation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21450)
- When two Workspaces select the same namespace in the same cluster using wildcard selectors, correctly assign the namespace to the oldest Workspace. Previously, both Workspaces would claim the namespace leading to undefined and non-deterministic behavior. Environments where no Workspaces use wildcard cluster or namespace selectors, or use wildcard selectors but have no conflicts in the list of namespaces selected, will be unaffected by this change. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21515)
- Remove the deprecated `experimental.ambientEnabled` and `asyncStatusWrites` helm values. These values already have no effect and their removal should not affect the behavior of any gloo-mesh components. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21591)
- Fix a panic that occurs when the translation context is nil during garbage collection, which can happen when there are no tctx outputs from translation that needed to be reconciled at that time. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21604)
New Features
- Added StrictRelayLoadBalancing feature gate to fix a bug in relay server load balancing where the connection count was checked before accounting for the incoming connection. When enabled, this enforces stricter 1:1 agent-to-management-pod connections when the number of agents equals the number of management replicas, ensuring optimal load distribution in environments with large numbers of clusters and namespaces. The feature gate defaults to false to preserve backward compatibility. Customers requiring strict 1:1 connections should enable this feature via --feature-gates=StrictRelayLoadBalancing=true or Helm values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13493)
- Introduced namespace-level output reconciliation control to support gradual migration from Gloo Platform APIs to direct use of open-source Istio and Gateway APIs, with a primary focus on Istio Ambient Mesh adoption. This enables users to incrementally transition ownership of Istio resources without requiring a disruptive, all-at-once cutover.
- Added VirtualDestinationOffboardingEnabled feature gate to allow the 'solo.io/prefer-other: true' annotation to be propagated to ServiceEntry resources generated from VirtualDestinations. This annotation indicates that the ServiceEntry should prefer other ServiceEntries when multiple ServiceEntries exist for the same host, effectively deprioritizing Gloo Mesh Enterprise generated ServiceEntries. The annotation can be set at two levels with inheritance: (1) Namespace annotation takes highest priority - if the namespace where the VirtualDestination is defined has the annotation, it is propagated to all ServiceEntries for VirtualDestinations in that namespace. (2) VirtualDestination annotation - if the namespace does not have the annotation, the VirtualDestination's annotation is used. The feature gate defaults to false. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21529)
- Added AllowVirtualDestinationWithoutSelectorsRouting feature gate to allow routing to VirtualDestinations that have no backing service selectors. This enables users to reference VirtualDestinations in RouteTables where the actual service resolution is delegated to Istio (via global services). (https://github.com/solo-io/gloo-mesh-enterprise/issues/21646)
- Added support for excluding Kubernetes resources from agent discovery and relay by labeling them with `discovery.mesh.gloo.solo.io/ignore=true`. When this label is present on a resource (such as a Service, Pod, or any other watched resource), the agent will not track it or send it to the management server.

v2.11.9 (v2.11.0)

Mon, 31 Aug 2026 20:42:54 GMT

v2.11.8 (v2.11.0)

Fri, 26 Jun 2026 22:42:48 GMT

v2.11.7 (v2.11.0)

Fri, 05 Jun 2026 17:44:55 GMT

v2.11.6 (v2.11.0)

Fri, 15 May 2026 19:21:22 GMT

v2.11.5 (v2.11.0)

Mon, 27 Apr 2026 15:25:01 GMT

v2.11.4 (v2.11.0)

Fri, 13 Mar 2026 22:56:27 GMT

v2.11.3 (v2.11.0)

Thu, 19 Feb 2026 22:58:37 GMT

Dependency Bumps
- alpine/alpine has been upgraded to 3.23.
- nginx/nginx has been upgraded to 1.29.4.
- golang/go has been upgraded to v1.25.7.
- solo-io/ext-auth-service has been upgraded to v0.74.0.
- solo-io/rate-limiter has been upgraded to v0.17.3.
- solo-io/otel-collector has been upgraded to v0.2.7.
Fixes
- Bump Istio proxy version in gloo-mesh-ui to fix CVE. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21609)
- Upgrade npm libraries to fix CVEs - qs, diff (https://github.com/solo-io/gloo-mesh-enterprise/issues/21690)
- Fix a panic that occurs when the translation context is nil during garbage collection, which can happen when there are no tctx outputs from translation that needed to be reconciled at that time. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21604)
- Remove the CFG0052 "expected vs actual CRD count" insight. This insight checked the actual vs expected number of Istio CRDs installed,
Helm Changes
- Upgrade Prometheus Helm chart from version 27.25.0 to 28.9.1, which removes `nodes/proxy` permissions from the default

v2.11.2 (v2.11.0)

Sat, 03 Jan 2026 01:07:56 GMT

Dependency Bumps
- solo.io/licensing has been upgraded to v0.9.0.
Fixes
- Added StrictRelayLoadBalancing feature gate to fix a bug in relay server load balancing where the connection count was checked before accounting for the incoming connection. When enabled, this enforces stricter 1:1 agent-to-management-pod connections when the number of agents equals the number of management replicas, ensuring optimal load distribution in environments with large numbers of clusters and namespaces. The feature gate defaults to false to preserve backward compatibility. Customers requiring strict 1:1 connections should enable this feature via --feature-gates=StrictRelayLoadBalancing=true or Helm values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13493)
- Do not log errors about missing nonexistent VirtualDestinations when using federation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21450)
- Introduced namespace-level output reconciliation control to support gradual migration from Gloo Platform APIs to direct use of open-source Istio and Gateway APIs, with a primary focus on Istio Ambient Mesh adoption. This enables users to incrementally transition ownership of Istio resources without requiring a disruptive, all-at-once cutover.
- When two Workspaces select the same namespace in the same cluster using wildcard selectors, correctly assign the namespace to the oldest Workspace. Previously, both Workspaces would claim the namespace leading to undefined and non-deterministic behavior. Environments where no Workspaces use wildcard cluster or namespace selectors, or use wildcard selectors but have no conflicts in the list of namespaces selected, will be unaffected by this change. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21515)

v2.11.1 (v2.11.0)

Fri, 05 Dec 2025 18:51:03 GMT

Dependency Bumps
- golang/go has been upgraded to v1.25.5.
- solo-io/ext-auth-service has been upgraded to v0.71.5.
- solo-io/rate-limiter has been upgraded to v0.16.5.
- solo-io/otel-collector has been upgraded to v0.2.6.
- solo-io/istio has been upgraded to v1.26.7-solo.

v2.11.0 (v2.11.0)

Thu, 13 Nov 2025 22:34:11 GMT

Extra Notes
- This release contained no user-facing changes.

v2.11.0-rc1 (v2.11.0)

Mon, 10 Nov 2025 16:21:30 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.6.
- solo.io/ext-auth-service has been upgraded to v0.70.1.
- solo.io/rate-limiter has been upgraded to v0.16.1.
- golang/go has been upgraded to v1.24.9.
- solo-io/ext-auth-service has been upgraded to v0.71.4.
- solo-io/rate-limiter has been upgraded to v0.16.4.
- solo-io/otel-collector has been upgraded to v0.2.5.
- k8s.io/api has been upgraded to v0.34.1.
- k8s.io/client-go has been upgraded to v0.34.1.
- k8s.io/apimachinery has been upgraded to v0.34.1.
- sigs.k8s.io/controller-runtime has been upgraded to v0.22.3.
- istio.io/api has been upgraded to v1.28.0-beta.1.
- istio.io/client-go has been upgraded to v1.28.0-beta.1.
- istio.io/istio has been upgraded to v1.28.0-beta.1-solo.
- golang/go has been upgraded to v1.25.3.
- docker.io/redis has been upgraded to 7.4.6-alpine.
- solo-io/solo-apis has been upgraded to gloo-v1.21.0-beta1.
Fixes
- Close stale relay client connections to the management server to allow agents to re-connect after a dropped connection. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20884)
- Populate `gloo_mesh_relay_client_last_delta_pull_received_timestamp_seconds` metric with the timestamp of the last delta received by the relay pull client. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21232)
- Agent should no longer delete discovered mesh resources when Kubernetes apiserver is under stress. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21278)
- Add `reset-before-request` and `http3-post-connect-failure` as valid values for the `retryOn` field of the `RetryTimeoutPolicy`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21333)
- Relax gateway detection to accept deployments with `inject.istio.io/templates: gateway` annotation without requiring the `auto` placeholder image name. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21366)
- Write statuses for ListenerConnectionPolicy resources that are successfully translated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21397)
- "Prevent Istio 1.28+ from being installed by ILM and add deprecation warnings to status" (https://github.com/solo-io/gloo-mesh-enterprise/issues/21315)
- "Fix RouteOption status loss in multicluster relay where RouteOptions with NamespacedStatuses format were losing their status information when relayed from gloo-mesh-agent to gloo-mesh-mgmt-server" (https://github.com/solo-io/solo-projects/issues/8490)
- Fixes the translation_errors and translation_warnings being clobbered in namespaces with global resources. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19493)
- "Update GatewayClass, Gateway, HTTPRoute from v1beta1 to v1 to fix GGUI v2.0 bugs" (https://github.com/solo-io/gloo-mesh-enterprise/issues/21273)
- Fixes for Gloo Gateway 2.0 UI. Ignores SupportedVersion condition for GatewayClass.
- Fixes the gloo-mesh-analyzer to expect the v1 Kubernetes Gateway API Gateway resource and not the v1beta1 version. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21372)
Helm Changes
- "Add helm values for scrape and otlp timeouts for observability pipeline" (https://github.com/solo-io/gloo-mesh-enterprise/issues/13160)
New Features
- "Add the ability to shard otel collector replicas" (https://github.com/solo-io/gloo-mesh-enterprise/issues/21230)

v2.10.10 (v2.10.0)

Tue, 01 Sep 2026 10:56:38 GMT

Dependency Bumps
- solo-io/rate-limiter has been upgraded to v0.18.15.
- solo-io/otel-collector has been upgraded to v0.3.9.
- cert-manager/cert-manager has been upgraded to v1.15.4.
- docker.io/redis has been upgraded to 7.4.10-alpine.
- aws/aws-sdk-go-v2 has been upgraded to v1.88.5.
- cilium/cilium has been upgraded to v1.17.16.
- google/cel-go has been upgraded to v0.30.0.
- gopacket/gopacket has been upgraded to v1.6.1.
- solo-io/rate-limiter has been upgraded to v0.21.0.
- solo-io/ext-auth-service has been upgraded to v0.86.2.
- golang/go has been upgraded to v1.26.7.
- labstack/echo has been upgraded to v4.15.3.
- solo-io/istio has been upgraded to v1.28.10-patch0-solo.
- prometheus/prometheus has been upgraded to v3.13.2.
- spiffe/spire has been upgraded to v1.12.6.
Fixes
- Bump ext-auth-service to v0.84.0, which fixes an identity fail-open: when OAuth2
- This is a behavior change for upstreams that relied on the header being left absent (rather
- This is not recommended, since it re-enables the fail-open the fix addresses; only use it as a
- The bundled OTel collector now ships only the components GME requires,
- A full-component fallback image, `gcr.io/gloo-mesh/otel-collector:0.5.0`, is
- The bundled OTel collector now compiles in only the 33 components the product actually needs, instead of the roughly 200 it inherited from the upstream distribution, which also cuts its CVE surface. The image name and registry are unchanged, `gcr.io/gloo-mesh/otel-collector`, and a default install needs no action, because the chart's own pipelines only reference components that are still compiled in. If you added a component through `telemetryCollectorCustomization` or `telemetryGatewayCustomization` (`extraReceivers`, `extraProcessors`, `extraExporters`, `extraExtensions`, `extraPipelines`) and it is not in the list below, the collector fails config validation and crashloops on startup. Check your values before you upgrade. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20252)
- The components compiled into the collector are, extensions: `health_check`, `basicauth`, `bearertokenauth`. Receivers: `otlp`, `nop`, `prometheus`, `filelog`, `jaeger`, `zipkin`, `redis`. Processors: `batch`, `memory_limiter`, `resource`, `filter`, `transform`, `metricstransform`, `cumulativetodelta`, `attributes`, `k8sattributes`. Exporters: `otlp`, `otlphttp`, `debug`, `nop`, `prometheus`, `clickhouse`, `file`, `redisstream`, `datadog`, `elasticsearch`, `prometheusremotewrite`, `kafka`, `splunk_hec`, `awss3`. No connectors are compiled in, so a pipeline that uses one will not start. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20252)
- The collector image is now built and signed by the GME release pipeline, and its tag tracks the GME release version (for example `2.14.0`) instead of a separate `0.x.y` line. If you pin `telemetryCollector.image.tag` or `telemetryGateway.image.tag` to a collector version, set it to the GME version or remove the override to take the chart default. Mirrored and air-gapped installs keep the same repository path, but need the new tag mirrored. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20252)
- `gloo_metrics_processor` was not used by the product and is therefore no longer compiled in. Remove any reference to it from custom collector configuration. The helm value `telemetryCollectorCustomization.enableCloudMetadataProcessing` is gone for the same reason, and setting it now has no effect. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20252)
- If this build is missing a component you depend on, Solo publishes a wide image with the full upstream component set at `gcr.io/gloo-mesh/otel-collector:0.5.0`, on a `0.x.y` tag line kept separate from GME's `2.x.y` tags. Point `telemetryCollector.image.tag` or `telemetryGateway.image.tag` at it to unblock yourself. It is meant as a temporary fallback, so if you find you need it, please open a support ticket telling us which component you use, so we can understand the use case and decide what to compile into the GME collector. Note that the wide image is built on upstream contrib v0.158.0, which deleted ten components that GME shipped before 2.14 and so cannot restore them: the `carbon`, `loki`, `opencensus` and `sapm` exporters, the `bigip`, `jmx`, `opencensus` and `sapm` receivers, the `routing` processor, and the `ecstaskobserver` extension. `routing` has an upstream successor, `routingconnector`, which the wide image does have. For the rest, change your configuration. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20252)

v2.10.9 (v2.10.0)

Sat, 27 Jun 2026 12:56:25 GMT

v2.10.8 (v2.10.0)

Fri, 05 Jun 2026 17:43:45 GMT

v2.10.7 (v2.10.0)

Fri, 15 May 2026 20:35:16 GMT

v2.10.6 (v2.10.0)

Fri, 24 Apr 2026 21:38:13 GMT

v2.10.5 (v2.10.0)

Sun, 15 Mar 2026 04:52:52 GMT

Dependency Bumps
- alpine/alpine has been upgraded to 3.23.
- nginx/nginx has been upgraded to 1.29.4.
- golang/go has been upgraded to v1.25.8.
- solo-io/ext-auth-service has been upgraded to v0.74.0.
- solo-io/rate-limiter has been upgraded to v0.17.3.
- solo-io/otel-collector has been upgraded to v0.2.7.
- k8s.io/api has been upgraded to v0.34.1.
- k8s.io/client-go has been upgraded to v0.34.1.
- k8s.io/apimachinery has been upgraded to v0.34.1.
- sigs.k8s.io/controller-runtime has been upgraded to v0.22.3.
- istio.io/api has been upgraded to v1.28.0-beta.1.
- istio.io/client-go has been upgraded to v1.28.0-beta.1.
- istio.io/istio has been upgraded to v1.28.0-beta.1-solo.
- golang/go has been upgraded to v1.25.3.
- solo.io/licensing has been upgraded to v0.9.0.
- golang/go has been upgraded to v1.26.1.
- solo-io/ext-auth-service has been upgraded to v0.74.1.
- solo-io/rate-limiter has been upgraded to v0.17.4.
- solo-io/otel-collector has been upgraded to v0.2.8.
- solo-io/istio has been upgraded to v1.28.5-solo.
Fixes
- Bump Istio proxy version in gloo-mesh-ui to fix CVE. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21609)
- Upgrade npm libraries to fix CVEs - qs, diff (https://github.com/solo-io/gloo-mesh-enterprise/issues/21690)
- Fix a panic that occurs when the translation context is nil during garbage collection, which can happen when there are no tctx outputs from translation that needed to be reconciled at that time. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21604)

v2.10.4 (v2.10.0)

Fri, 02 Jan 2026 17:33:26 GMT

Fixes
- Do not log errors about missing nonexistent VirtualDestinations when using federation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21450)
- When two Workspaces select the same namespace in the same cluster using wildcard selectors, correctly assign the namespace to the oldest Workspace. Previously, both Workspaces would claim the namespace leading to undefined and non-deterministic behavior. Environments where no Workspaces use wildcard cluster or namespace selectors, or use wildcard selectors but have no conflicts in the list of namespaces selected, will be unaffected by this change. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21515)

v2.10.3 (v2.10.0)

Fri, 05 Dec 2025 18:52:34 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.11.
- solo-io/ext-auth-service has been upgraded to v0.71.5.
- solo-io/rate-limiter has been upgraded to v0.16.5.
- solo-io/otel-collector has been upgraded to v0.2.6.
- solo-io/istio has been upgraded to v1.26.7-solo.
Fixes
- Relax gateway detection to accept deployments with `inject.istio.io/templates: gateway` annotation without requiring the `auto` placeholder image name. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21366)

v2.10.2 (v2.10.0)

Thu, 23 Oct 2025 01:56:19 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.9.
- solo-io/ext-auth-service has been upgraded to v0.71.4.
- solo-io/rate-limiter has been upgraded to v0.16.4.
- solo-io/otel-collector has been upgraded to v0.2.5.
- docker.io/redis has been upgraded to 7.4.6-alpine.
Fixes
- Close stale relay client connections to the management server to allow agents to re-connect after a dropped connection. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20884)
- Add `reset-before-request` and `http3-post-connect-failure` as valid values for the `retryOn` field of the `RetryTimeoutPolicy`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21333)
- Write statuses for ListenerConnectionPolicy resources that are successfully translated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21397)
- Fixes for Gloo Gateway 2.0 UI. Ignores SupportedVersion condition for GatewayClass.
- Fixes the gloo-mesh-analyzer to expect the v1 Kubernetes Gateway API Gateway resource and not the v1beta1 version. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21372)

v2.10.1 (v2.10.0)

Mon, 22 Sep 2025 18:49:41 GMT

Dependency Bumps
- solo-io/solo-apis has been upgraded to gloo-v1.21.0-beta1.
Fixes
- Populate `gloo_mesh_relay_client_last_delta_pull_received_timestamp_seconds` metric with the timestamp of the last delta received by the relay pull client. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21232)
- Agent should no longer delete discovered mesh resources when Kubernetes apiserver is under stress. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21278)
- "Fix RouteOption status loss in multicluster relay where RouteOptions with NamespacedStatuses format were losing their status information when relayed from gloo-mesh-agent to gloo-mesh-mgmt-server" (https://github.com/solo-io/solo-projects/issues/8490)
- Fixes the translation_errors and translation_warnings being clobbered in namespaces with global resources. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19493)
- "Update GatewayClass, Gateway, HTTPRoute from v1beta1 to v1 to fix GGUI v2.0 bugs" (https://github.com/solo-io/gloo-mesh-enterprise/issues/21273)

v2.10.0 (v2.10.0)

Tue, 19 Aug 2025 04:29:24 GMT

v2.10.0-rc1 (v2.10.0)

Thu, 07 Aug 2025 01:26:11 GMT

Dependency Bumps
- solo-io/licensing has been upgraded to v0.7.3.
- solo-io/ext-auth-service has been upgraded to v0.69.2.
- solo-io/rate-limiter has been upgraded to v0.16.0.
- solo-io/otel-collector has been upgraded to v0.2.4.
- solo-io/gloo-otelcollector-contrib has been upgraded to v0.116.0-1.
Fixes
- Fix `HTTPBufferPolicy` translation to exclude websocket connections from buffer policies when applied to other routes in the same listener. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11222)
- Global Services in the UI are now presented better. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21095)
- Upgrade base image of `gloo-mesh-envoy` to resolve CVEs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21122)
- "Add glooUi.discovery.enabled field to allow explicitly disabling discovery in UI" (https://github.com/solo-io/gloo-mesh-enterprise/issues/21012)
- "Fixes cluster details using temp data during it's initial load." (https://github.com/solo-io/gloo-mesh-enterprise/issues/21020)
- "Cluster overview updated to display the Gloo Mesh agent version." (https://github.com/solo-io/gloo-mesh-enterprise/issues/21087)
- Fixes a bug with the clusters landing page, where the clusters
- Fixes the total value that is returned by the workspace landing
- "The color used for warning edge color has been made more visible." (https://github.com/solo-io/gloo-mesh-enterprise/issues/21147)
- Changes the 'yarn prepare' script to 'yarn postinstall' to work with yarn 2+. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21141)
- "Filters tag list added to overview pages missing it & overview page tag lists now include status filter." (https://github.com/solo-io/gloo-mesh-enterprise/issues/21015)
- "Resource subpages merged into a single unified page." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20994)
- "Syntax Highlighter controls now becomes opaque if first couple lines are to long." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20838)
- "Gateway routes will no longer auto expand if more than 1." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20624)
- Cleans up the table filters which the UI places in the URL. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21021)
Helm Changes
- Removes the `prometheus-server-migration` hook from helm installation. This was temporarily necessary for upgrading the Prometheus community chart used by the included Prometheus to version 25.11.0. The `skipAutoMigration` helm value now has no effect. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17374)
- Update the prometheus-community chart to 27.25.0, which updates Prometheus to v3.5.0 (https://github.com/solo-io/gloo-mesh-enterprise/issues/20262)
New Features
- Global Services are now viewable in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20456)
- "Added support to UI for displaying info about the Istio Basic Support license." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20997)
- Policy details are no longer shown as separate pages in the UI. Instead their YAML and select details are shown in a slide-out. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21017)
- "UI Dashboard now displays gloo operator status." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20629)
- Adds table filtering and sorting state to the URL. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20981)

v2.10.0-beta2 (v2.10.0)

Mon, 30 Jun 2025 15:04:23 GMT

Breaking Changes
- Previously, client-side policies were not properly applied to VirtualDestinations which are imported from one workspace to another
Dependency Bumps
- solo-io/istio has been upgraded to v1.26.2-solo.
- golang/go has been upgraded to v1.24.4.
Fixes
- VirtualDestination warning about missing backing workloads will now appear on the CR instead of in the logs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19983)
- "Resolve flakey unit test by ending background garbage collection on context cancellation." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20962)
- "Fixed missing metrics in default pipeline for solo.io licenses. Now these are available in Gloo Telemetry Gateway." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20173)
- "Added canonical labels to keep-list to track workloads belonging to multiple services. This helps to monitor traffic going trough ingressgateways during canary upgrades." (https://github.com/solo-io/gloo-mesh-enterprise/issues/17473)
- Fixes a bug where the insights page filters would flicker on and off. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20786)
- "Dashboard component health names updated to show their type." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20630)
New Features
- Support `OPTIONAL_MUTUAL` as a `VirtualGateway` TLS mode for Ingress Gateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16769)
- Add support for applying JWT policies to Virtual Destinations (These VDs can only have backing k8s services, not external services or workloads). (https://github.com/solo-io/gloo-mesh-enterprise/issues/19484)
- Add support for applying external auth policies to Virtual Destinations. (These VDs can only have backing k8s services, not external services or workloads.) (https://github.com/solo-io/gloo-mesh-enterprise/issues/19825)
- kgateway (Gloo Gateway v2.x) is supported by Gloo UI's Graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20638)
- Add TCP egress support for ExternalService resources through egress gateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9321)
- Graph node positions are preserved in localStorage when they are dragged. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20062)
- "UI top level navigation updated to have all links on navigation root." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20889)
- "Clicking the Mesh control plane health item on dashboard will now display Service Mesh Controllers" (https://github.com/solo-io/gloo-mesh-enterprise/issues/20631)

v2.10.0-beta1 (v2.10.0)

Mon, 02 Jun 2025 15:37:38 GMT

Fixes
- The management server should no longer crash when delegated routes have invalid matchers. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19636)
- ExternalName Services without ports can now be selected by a TrimProxyConfigPolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19925)
- Introduces the ability to specify a new environment variable `GLOO_CORS_TRANSLATION_MODE` under `extraEnvs` in the Helm chart to control how CORS policies are translated. In environments with large `RouteTables`, Gloo may generate `VirtualServices` that approach the maximum value size limit in etcd. This issue is exacerbated when large CORS policies are applied to many routes, as the corresponding configuration ends up inlined on the `VirtualService` routes. To address this, the new feature allows moving CORS configuration into separate `EnvoyFilters`, significantly reducing the size of generated `VirtualServices`. Valid values for `GLOO_CORS_TRANSLATION_MODE` are: "VS_ONLY" (`VirtualService` only, default), "EF_ONLY" (`EnvoyFilter` only), and "VS_AND_EF" (both `VirtualService` and `EnvoyFilter`). To ensure zero downtime when enabling this feature, set the environment variable to "VS_AND_EF" first. Once the update has been processed and the new `EnvoyFilters` are in place, switch to "EF_ONLY". Helm chart validation will fail if the mode is set and not one of the valid modes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20807)
- Border width of graph container nodes now should now stay the same when zooming. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20714)
New Features
- "Workspaces link on sidebar now hidden if no workspaces present." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20625)
- The graph page now stores more of its state in the URL. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20308)

v2.9.7 (v2.9.0)

Mon, 18 May 2026 13:17:35 GMT

v2.9.6 (v2.9.0)

Mon, 16 Mar 2026 22:53:57 GMT

Dependency Bumps
- alpine/alpine has been upgraded to 3.23.
- nginx/nginx has been upgraded to 1.29.4.
- golang/go has been upgraded to v1.26.1.
- solo-io/ext-auth-service has been upgraded to v0.74.1.
- solo-io/rate-limiter has been upgraded to v0.17.4.
- solo-io/otel-collector has been upgraded to v0.2.8.
- k8s.io/api has been upgraded to v0.34.1.
- k8s.io/client-go has been upgraded to v0.34.1.
- k8s.io/apimachinery has been upgraded to v0.34.1.
- sigs.k8s.io/controller-runtime has been upgraded to v0.22.3.
- istio.io/api has been upgraded to v1.28.0-beta.1.
- istio.io/client-go has been upgraded to v1.28.0-beta.1.
- istio.io/istio has been upgraded to v1.28.0-beta.1-solo.
- golang/go has been upgraded to v1.25.3.
- solo.io/licensing has been upgraded to v0.9.0.
Fixes
- Bump Istio proxy version in gloo-mesh-ui to fix CVE. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21609)
- Upgrade npm libraries to fix CVEs - qs, diff (https://github.com/solo-io/gloo-mesh-enterprise/issues/21690)
- Fix a panic that occurs when the translation context is nil during garbage collection, which can happen when there are no tctx outputs from translation that needed to be reconciled at that time. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21604)

v2.9.5 (v2.9.0)

Tue, 23 Dec 2025 19:23:43 GMT

v2.9.4 (v2.9.0)

Fri, 05 Dec 2025 18:52:50 GMT

v2.9.3 (v2.9.0)

Thu, 23 Oct 2025 00:03:05 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.6.
- solo.io/ext-auth-service has been upgraded to v0.71.1.
- solo.io/rate-limiter has been upgraded to v0.16.1.
- golang/go has been upgraded to v1.24.9.
- solo-io/ext-auth-service has been upgraded to v0.71.4.
- solo-io/rate-limiter has been upgraded to v0.16.4.
- solo-io/otel-collector has been upgraded to v0.2.5.
- docker.io/redis has been upgraded to 7.4.6-alpine.
Fixes
- Close stale relay client connections to the management server to allow agents to re-connect after a dropped connection. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20884)
- Populate `gloo_mesh_relay_client_last_delta_pull_received_timestamp_seconds` metric with the timestamp of the last delta received by the relay pull client. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21232)
- Agent should no longer delete discovered mesh resources when Kubernetes apiserver is under stress. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21278)
- Upgrade base image of `gloo-mesh-envoy` to resolve CVEs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21122)
- Fixes the translation_errors and translation_warnings being clobbered in namespaces with global resources. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19493)
- "Cluster overview updated to display the Gloo Mesh agent version." (https://github.com/solo-io/gloo-mesh-enterprise/issues/21087)
- "The color used for warning edge color has been made more visible." (https://github.com/solo-io/gloo-mesh-enterprise/issues/21147)
Helm Changes
- Removes the `prometheus-server-migration` hook from helm installation. This was temporarily necessary for upgrading the Prometheus community chart used by the included Prometheus to version 25.11.0. The `skipAutoMigration` helm value now has no effect. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17374)

v2.9.2 (v2.9.0)

Fri, 18 Jul 2025 22:37:17 GMT

Dependency Bumps
- solo-io/ext-auth-service has been upgraded to v0.69.2.
- solo-io/rate-limiter has been upgraded to v0.16.0.
- solo-io/otel-collector has been upgraded to v0.2.4.
- solo-io/gloo-otelcollector-contrib has been upgraded to v0.116.0-1.
- solo-io/istio has been upgraded to v1.26.2-solo.
- golang/go has been upgraded to v1.24.4.
Fixes
- Fix `HTTPBufferPolicy` translation to exclude websocket connections from buffer policies when applied to other routes in the same listener. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11222)
- "Add glooUi.discovery.enabled field to allow explicitly disabling discovery in UI" (https://github.com/solo-io/gloo-mesh-enterprise/issues/21012)
- "Resolve flakey unit test by ending background garbage collection on context cancellation." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20962)
- "Fixed missing metrics in default pipeline for solo.io licenses. Now these are available in Gloo Telemetry Gateway." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20173)
- "Added canonical labels to keep-list to track workloads belonging to multiple services. This helps to monitor traffic going trough ingressgateways during canary upgrades." (https://github.com/solo-io/gloo-mesh-enterprise/issues/17473)
- Add TCP egress support for ExternalService resources through egress gateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9321)
- "Fixes cluster details using temp data during it's initial load." (https://github.com/solo-io/gloo-mesh-enterprise/issues/21020)
- Fixes a bug with the clusters landing page, where the clusters
- Fixes a bug where the insights page filters would flicker on and off. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20786)
- Removes a duplicate make target. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20987)

v2.9.1 (v2.9.0)

Thu, 12 Jun 2025 22:12:39 GMT

Fixes
- Support `OPTIONAL_MUTUAL` as a `VirtualGateway` TLS mode for Ingress Gateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16769)
- Add support for applying JWT policies to Virtual Destinations (These VDs can only have backing k8s services, not external services or workloads). (https://github.com/solo-io/gloo-mesh-enterprise/issues/19484)
- The management server should no longer crash when delegated routes have invalid matchers. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19636)
- ExternalName Services without ports can now be selected by a TrimProxyConfigPolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19925)
- VirtualDestination warning about missing backing workloads will now appear on the CR instead of in the logs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19983)
- Introduces the ability to specify a new environment variable `GLOO_CORS_TRANSLATION_MODE` under `extraEnvs` in the Helm chart to control how CORS policies are translated. In environments with large `RouteTables`, Gloo may generate `VirtualServices` that approach the maximum value size limit in etcd. This issue is exacerbated when large CORS policies are applied to many routes, as the corresponding configuration ends up inlined on the `VirtualService` routes. To address this, the new feature allows moving CORS configuration into separate `EnvoyFilters`, significantly reducing the size of generated `VirtualServices`. Valid values for `GLOO_CORS_TRANSLATION_MODE` are: "VS_ONLY" (`VirtualService` only, default), "EF_ONLY" (`EnvoyFilter` only), and "VS_AND_EF" (both `VirtualService` and `EnvoyFilter`). To ensure zero downtime when enabling this feature, set the environment variable to "VS_AND_EF" first. Once the update has been processed and the new `EnvoyFilters` are in place, switch to "EF_ONLY". Helm chart validation will fail if the mode is set and not one of the valid modes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20807)
- Client-side policies are not properly applied to VirtualDestinations which are imported from one workspace to another

v2.9.0 (v2.9.0)

Fri, 30 May 2025 19:15:23 GMT

Extra Notes
- This release contained no user-facing changes.

v2.9.0-rc1 (v2.9.0)

Wed, 21 May 2025 20:55:33 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.2.
- solo-io/skv2 has been upgraded to v0.42.2.
- istio.io/istio has been upgraded to 1.25.2.
- solo.io/istio has been upgraded to v1.25.2-solo.
- solo-io/ext-auth-service has been upgraded to v0.68.1.
- solo-io/ext-auth-service has been upgraded to v0.68.0.
- istio.io/api has been upgraded to v1.26.0-rc.0.
- istio.io/istio has been upgraded to v1.26.0-rc.0.
- istio.io/client-go has been upgraded to v1.26.0-rc.0.
- istio.io/api has been upgraded to v1.25.2.
- istio.io/client-go has been upgraded to v1.25.2.
- k8s.io/api has been upgraded to v0.33.0.
- k8s.io/client-go has been upgraded to v0.33.0.
- k8s.io/apimachinery has been upgraded to v0.33.0.
- spiffe/spire has been upgraded to v1.12.1.
- solo-io/skv2 has been upgraded to v0.43.3.
Fixes
- Fixes race condition where getting cluster name via annotation could cause panics (https://github.com/solo-io/gloo-mesh-enterprise/issues/16342)
- Remove dead area between toggles from the Navbar's top nav item (https://github.com/solo-io/gloo-mesh-enterprise/issues/19642)
- External service wildcard routes can now be routed via egress gateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19934)
- Improve graph node tooltip rendering (https://github.com/solo-io/gloo-mesh-enterprise/issues/20055)
- Minify the `values.schema.json` files in the Helm charts. This prevents us from running into the new maximum file sizes [introduced by Helm](https://github.com/helm/helm/commit/e4da49785aa6e6ee2b86efd5dd9e43400318262b) in `v3.17.3`, causing the chart to be unusable. There is no functional change. Users can still prettify the values using tools like `jq` if needed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20411)
- Support ServiceEntry backends on HTTPRoute details pages in the Dashboard UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20437)
- Insight BP0005 will now only fire when translation is actually disabled. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20471)
- Surfaces errors that happen during layouting the graph (https://github.com/solo-io/gloo-mesh-enterprise/issues/20502)
- Adds GRPCRoute to the gloo-mesh-analyzer's RBAC rules. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20679)
- Commands generated in the UI by the "Advanced Debug Report" page will now show the correct namespaces. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19271)
- "fixes issue where iat jwt claim was being validated when it is for informational purposes only" (https://github.com/solo-io/gloo-mesh-enterprise/issues/20598)
- Fixes a bug where invalid EnvoyFilters were generated when a ForwardTo route with regexRewrite or autoHostRewrite was invalid. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20400)
- "Design for dashboard/cluster details tweaked to better fit design mock." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20690)
- "Fixed dashboard monitoring charts overflowing their container." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20694)
- "Tweaked site navigation sidebar to address design feedback." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20353)
- "Tweaked tables to address design feedback." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20354)
- "Tweaked table pagination to address design feedback." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20356)
- "App footer removed as per design feedback." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20462)
- "Updated status filter input to address design feedback." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20355)
- Fixes the graph storybook that is started with `make ui-testing-storybook`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20497)
- Fixes the original graph view. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20589)
- "Gateway listeners now only auto expand if there's only 1." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20689)
- "Gateways overview page no longer includes "gateway class" in it's types." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20686)
- "Destinations overview page no longer includes "workload entry" in it's types." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20688)
- "The graph filter selection overlay properly integrated." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20388)
- Parent nodes on the network graph in the UI should shrink to fit the child nodes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20221)
- "Loading spinner sizes standardized and polishing to match design." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20357)
- "Workspace/Cluster overview pages no longer auto redirect based on cached filters." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20693)
New Features
- Add new layouting options to the graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20309)
- Adds an error level insight for peering. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20463)
- Updates Graph Settings and Flags to use new toggle (https://github.com/solo-io/gloo-mesh-enterprise/issues/20577)
- UI now supports the ability to create a cluster and supports installing Gateway/Mesh from cluster details page.
- UI now supports the ability to create a cluster and supports installing Gateway/Mesh from cluster details page.
- Adds make targets for developing the UI on the ui-team GKE cluster. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20414)

v2.8.6 (v2.8.0)

Tue, 23 Dec 2025 17:17:44 GMT

v2.8.5 (v2.8.0)

Fri, 05 Dec 2025 19:35:24 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.11.
- solo-io/ext-auth-service has been upgraded to v0.71.5.
- solo-io/rate-limiter has been upgraded to v0.16.5.
- solo-io/otel-collector has been upgraded to v0.2.6.
- solo-io/istio has been upgraded to v1.26.7-solo.
Fixes
- Changes the 'yarn prepare' script to 'yarn postinstall' to work with yarn 2+. (https://github.com/solo-io/gloo-mesh-enterprise/issues/21141)

v2.8.4 (v2.8.0)

Thu, 23 Oct 2025 13:25:02 GMT

v2.8.3 (v2.8.0)

Fri, 18 Jul 2025 22:37:20 GMT

Dependency Bumps
- solo-io/ext-auth-service has been upgraded to v0.69.2.
- solo-io/rate-limiter has been upgraded to v0.16.0.
- solo-io/otel-collector has been upgraded to v0.2.4.
- solo-io/gloo-otelcollector-contrib has been upgraded to v0.116.0-1.
- golang/go has been upgraded to v1.24.4.
Fixes
- Fix `HTTPBufferPolicy` translation to exclude websocket connections from buffer policies when applied to other routes in the same listener. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11222)
- "Add glooUi.discovery.enabled field to allow explicitly disabling discovery in UI" (https://github.com/solo-io/gloo-mesh-enterprise/issues/21012)
- "Resolve flakey unit test by ending background garbage collection on context cancellation." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20962)
- "Fixed missing metrics in default pipeline for solo.io licenses. Now these are available in Gloo Telemetry Gateway." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20173)
- "Added canonical labels to keep-list to track workloads belonging to multiple services. This helps to monitor traffic going trough ingressgateways during canary upgrades." (https://github.com/solo-io/gloo-mesh-enterprise/issues/17473)
- Add TCP egress support for ExternalService resources through egress gateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9321)
- "Fixes cluster details using temp data during it's initial load." (https://github.com/solo-io/gloo-mesh-enterprise/issues/21020)
- Fixes a bug with the clusters landing page, where the clusters
- Fixes the graph settings dropdown menu so that it's updated with the correct values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20798)
- Fixes a bug where the insights page filters would flicker on and off. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20786)

v2.8.2 (v2.8.0)

Thu, 12 Jun 2025 22:12:58 GMT

v2.8.1 (v2.8.0)

Fri, 23 May 2025 17:13:08 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.2.
- solo.io/istio has been upgraded to v1.25.2-solo.
- solo-io/ext-auth-service has been upgraded to v0.68.1.
- solo-io/ext-auth-service has been upgraded to v0.68.0.
- spiffe/spire has been upgraded to v1.12.1.
- solo-io/skv2 has been upgraded to v0.43.3.
Fixes
- External service wildcard routes can now be routed via egress gateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19934)
- Adds GRPCRoute to the gloo-mesh-analyzer's RBAC rules. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20679)
- Commands generated in the UI by the "Advanced Debug Report" page will now show the correct namespaces. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19271)
- "fixes issue where iat jwt claim was being validated when it is for informational purposes only" (https://github.com/solo-io/gloo-mesh-enterprise/issues/20598)
- "Design for dashboard/cluster details tweaked to better fit design mock." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20690)
- "Fixed dashboard monitoring charts overflowing their container." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20694)
- Fixes the graph storybook that is started with `make ui-testing-storybook`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20497)
- "Gateway listeners now only auto expand if there's only 1." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20689)
- "Gateways overview page no longer includes "gateway class" in it's types." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20686)
- "Destinations overview page no longer includes "workload entry" in it's types." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20688)
- "The graph filter selection overlay properly integrated." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20388)
- "Workspace/Cluster overview pages no longer auto redirect based on cached filters." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20693)

v2.8.0 (v2.8.0)

Mon, 05 May 2025 16:45:22 GMT

Extra Notes
- This release contained no user-facing changes.

v2.8.0-rc2 (v2.8.0)

Tue, 29 Apr 2025 22:07:25 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.42.2.
- istio.io/istio has been upgraded to 1.25.2.
- istio.io/api has been upgraded to v1.25.2.
- istio.io/client-go has been upgraded to v1.25.2.
Fixes
- Fixes race condition where getting cluster name via annotation could cause panics (https://github.com/solo-io/gloo-mesh-enterprise/issues/16342)
- Minify the `values.schema.json` files in the Helm charts. This prevents us from running into the new maximum file sizes [introduced by Helm](https://github.com/helm/helm/commit/e4da49785aa6e6ee2b86efd5dd9e43400318262b) in `v3.17.3`, causing the chart to be unusable. There is no functional change. Users can still prettify the values using tools like `jq` if needed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20411)
- Support ServiceEntry backends on HTTPRoute details pages in the Dashboard UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20437)
- Insight BP0005 will now only fire when translation is actually disabled. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20471)
- Fixes a bug where invalid EnvoyFilters were generated when a ForwardTo route with regexRewrite or autoHostRewrite was invalid. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20400)
- "Tweaked site navigation sidebar to address design feedback." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20353)
- "Tweaked tables to address design feedback." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20354)
- "Tweaked table pagination to address design feedback." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20356)
- "App footer removed as per design feedback." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20462)
- "Updated status filter input to address design feedback." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20355)
- "Loading spinner sizes standardized and polishing to match design." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20357)
New Features
- Adds an error level insight for peering. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20463)
- Adds make targets for developing the UI on the ui-team GKE cluster. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20414)

v2.8.0-rc1 (v2.8.0)

Fri, 18 Apr 2025 14:43:01 GMT

Dependency Bumps
- redis/redis has been upgraded to 7.4.2-alpine.
- github.com/getkin/kin-openapi has been upgraded to v0.131.0.
- alpine/alpine has been upgraded to 3.21.
- nginx/nginx has been upgraded to 1.27.4-alpine-slim.
- oapi-codegen/oapi-codegen has been upgraded to v2.4.1.
- prometheus/prometheus has been upgraded to v2.53.4.
- sigs.k8s.io/kind has been upgraded to v0.27.0.
Fixes
- In the Dashboard UI, expand Gloo Gateway delegated routes under their parent route rules. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19519)
- "Improved search for Global Services." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20461)
- Fixes an issue where the auto generated remote gateway is deleted when the agent is deployed in the mgmt cluster. Must be used with solo-istio 1.25.2-patch0 or later for the fix to work. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20434)
- Fixes a bug whereby an insight would incorrectly fire for deployments in an Ambient mesh claiming "missing-control-plane". (https://github.com/solo-io/gloo-mesh-enterprise/issues/20295)
- Re enables the Cypress e2e UI tests for the graph page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20224)
- Adds a performance metrics section to the graph in the UI when the graph debugging feature flag is enabled. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20051)
- Updates the graph so that moving nodes up or left outside their container does not move the rest of the nodes in their container along with them. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20232)
- Fixes the directions of TCP graph traffic in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20214)
- "The summary on insight details drawer now supports markdown." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20251)
- Shows the new graph settings button even when there is no data. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20315)
- Only one drawer on the graph page is now allowed to be open at once. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20299)
- "Remaining UI list pages updated to have filters in topbar." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20137)
- Updates UI packages to fix vulnerabilites. Also fixes warning messages when running yarn commands. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20345)
- Fix a bug that caused an insight to incorrectly fire for Istio incompatibility when no such incompatibility existed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20295)
Helm Changes
- Remove the `glooUi.auth.oidc.session.redis` and `glooUi.auth.oidc.session.cookie` helm values and associated configuration. Going forward, only cookie-based caching of sessions in the UI will be supported. As before, this caching method is used by default. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19675)
New Features
- Add hover, drag and highlight effects to graph (https://github.com/solo-io/gloo-mesh-enterprise/issues/19684)
- Implements peering automation in GME. In order to enable this feature, solo-istio >= 1.25.1 must be used and the `configDistribution` featureGate needs to be enabled. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19920)
- "Added new page and api server call for Global Services." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19923)
- Filtering options are now consistent across all tables, and more consistent. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20084)

v2.8.0-beta2 (v2.8.0)

Fri, 28 Mar 2025 19:09:42 GMT

Dependency Bumps
- solo-io/rate-limiter has been upgraded to v0.14.1.
- solo-io/envoy-gloo-ee has been upgraded to v1.27.7-patch5.
- solo-io/ext-auth-service has been upgraded to v0.66.1.
- solo-io/otel-collector has been upgraded to v0.2.1.
- golang/go has been upgraded to v1.23.7.
- golang.org/x/oauth2 has been upgraded to v0.27.0.
- solo-io/ext-auth-service has been upgraded to v0.66.2.
- solo-io/rate-limiter has been upgraded to v0.14.2.
- solo-io/otel-collector has been upgraded to v0.2.2.
- solo-io/rate-limiter has been upgraded to v0.13.2.
Fixes
- Fixes bug where translation_warning and translation_error do not decrement as expected when errors/warnings resolve (https://github.com/solo-io/gloo-mesh-enterprise/issues/19493)
- "Fixes relay race condition where a new pull stream could be established before the mgmt server finished
- The display of YAML in the UI is now more readable, especially on wider screens. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19885)
- The environment health information in the UI main Dashboard and Cluster Details pages is now more useful. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20070)
- Edge improvements for self-referencing nodes (https://github.com/solo-io/gloo-mesh-enterprise/issues/20115)
- Fix disappearing graph edges when changing routes (https://github.com/solo-io/gloo-mesh-enterprise/issues/20139)
- Disable analyzer on "meshctl debug report" by default. Added flag `--run-analyzer` as an option. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20260)
- "allow both lower- and uppercase feature gate flag in HelmEnableCondition for ConfigDistribution" (https://github.com/solo-io/gloo-mesh-enterprise/issues/20296)
- Fix issue where insights-engine doesn't handle license changes. This happened because we didn't check errors returned from the run
- Fix a bug whereby insights would not be triggered when re-enabled via removal from the InsightsConfig CR. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19994)
- spire: create spire-ca secret using IssuedCertificate flow
- Currently, spire-ca secret is only created when cacerts is also
- This decouples the spire-ca cert lifecycle from cacerts on the agent
- Testing done:
- Verified that spire-ca is auto created when gloo-spire-server is
- Unit tests. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16276)
- "All table rows with detail links / yaml are now clickable instead" (https://github.com/solo-io/gloo-mesh-enterprise/issues/20149)
- "Updated cluster overview with new design." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20030)
- "UI temp color names updated to match new design system." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20122)
- Fixes the Gloo Health Card on the dashboard to show the correct version (https://github.com/solo-io/gloo-mesh-enterprise/issues/20185)
- Adds a way to view the graph JSON on the graph page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20083)
- Fixes an issue where the graph would flicker when first loaded. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20056)
- Recalculate layout when filters change. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20049)
- "Addressed some HTTP vs TCP graph feedback + fixed settings bug." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20222)
- Addresses refactoring and typescript type requests for the new graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20013)
- Fixes a bug where external services could break the infra graph display. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20094)
- Fixes the storybook stories for the new and old graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19691)
- Updates the service details graph page to show the new graph by default. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20220)
- Updates the graph page to show the new graph by default. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20220)
- "License dropdown moved from topbar to sidebar." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20031)
- Fixes the tracing path to be passed in correctly when tracing is enabled. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20152)
New Features
- Adds support for amending the rate-limiter deployment to enable oTel tracing`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14749)
- "Adds metrics to the agent that help to determine the health of the relay connection,
- Add ability for graph nodes to expand their parents on drag (https://github.com/solo-io/gloo-mesh-enterprise/issues/19680)
- Monitoring on the dashboard is now filtered by data plane clusters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20141)
- There is now a slide-out section in the clusters area that helps generate debug reports. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20006)
- Add reset layout button to graph (https://github.com/solo-io/gloo-mesh-enterprise/issues/20050)
- Add tooltips to the new graph controls (https://github.com/solo-io/gloo-mesh-enterprise/issues/20054)
- Add support for the injaTemplate.dynamicMetadataValues.jsonToProto field in request and response transformations configured by TransformationPolicies. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17724)
- Added a rate limiter 'rateLimiter.rateLimiter.setDynamicMetadata' value to the Helm chart that, if set to true, will

v2.8.0-beta1 (v2.8.0)

Thu, 27 Feb 2025 22:32:38 GMT

v2.7.7 (v2.7.0)

Thu, 23 Oct 2025 13:25:28 GMT

v2.7.6 (v2.7.0)

Fri, 25 Jul 2025 20:45:07 GMT

Extra Notes
- This release contained no user-facing changes.

v2.7.5 (v2.7.0)

Wed, 16 Jul 2025 19:58:37 GMT

Dependency Bumps
- solo-io/ext-auth-service has been upgraded to v0.69.2.
- solo-io/rate-limiter has been upgraded to v0.16.0.
- solo-io/otel-collector has been upgraded to v0.2.4.
- solo-io/gloo-otelcollector-contrib has been upgraded to v0.116.0-1.
- golang/go has been upgraded to v1.24.4.
Fixes
- Fix `HTTPBufferPolicy` translation to exclude websocket connections from buffer policies when applied to other routes in the same listener. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11222)
- "Add glooUi.discovery.enabled field to allow explicitly disabling discovery in UI" (https://github.com/solo-io/gloo-mesh-enterprise/issues/21012)
- "Resolve flakey unit test by ending background garbage collection on context cancellation." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20962)
- "Fixed missing metrics in default pipeline for solo.io licenses. Now these are available in Gloo Telemetry Gateway." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20173)
- "Added canonical labels to keep-list to track workloads belonging to multiple services. This helps to monitor traffic going trough ingressgateways during canary upgrades." (https://github.com/solo-io/gloo-mesh-enterprise/issues/17473)
- "Fixes cluster details using temp data during it's initial load." (https://github.com/solo-io/gloo-mesh-enterprise/issues/21020)
- Fixes a bug with the clusters landing page, where the clusters
- Fixes the graph settings dropdown menu so that it's updated with the correct values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20798)

v2.7.4 (v2.7.0)

Thu, 12 Jun 2025 22:13:04 GMT

Fixes
- Support `OPTIONAL_MUTUAL` as a `VirtualGateway` TLS mode for Ingress Gateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16769)
- The management server should no longer crash when delegated routes have invalid matchers. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19636)
- ExternalName Services without ports can now be selected by a TrimProxyConfigPolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19925)
- VirtualDestination warning about missing backing workloads will now appear on the CR instead of in the logs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19983)
- Introduces the ability to specify a new environment variable `GLOO_CORS_TRANSLATION_MODE` under `extraEnvs` in the Helm chart to control how CORS policies are translated. In environments with large `RouteTables`, Gloo may generate `VirtualServices` that approach the maximum value size limit in etcd. This issue is exacerbated when large CORS policies are applied to many routes, as the corresponding configuration ends up inlined on the `VirtualService` routes. To address this, the new feature allows moving CORS configuration into separate `EnvoyFilters`, significantly reducing the size of generated `VirtualServices`. Valid values for `GLOO_CORS_TRANSLATION_MODE` are: "VS_ONLY" (`VirtualService` only, default), "EF_ONLY" (`EnvoyFilter` only), and "VS_AND_EF" (both `VirtualService` and `EnvoyFilter`). To ensure zero downtime when enabling this feature, set the environment variable to "VS_AND_EF" first. Once the update has been processed and the new `EnvoyFilters` are in place, switch to "EF_ONLY". Helm chart validation will fail if the mode is set and not one of the valid modes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20807)
- Client-side policies are not properly applied to VirtualDestinations which are imported from one workspace to another
- "Gateway listeners now only auto expand if there's only 1." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20689)
- "Gateways overview page no longer includes "gateway class" in it's types." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20686)
- "Destinations overview page no longer includes "workload entry" in it's types." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20688)

v2.7.3 (v2.7.0)

Sat, 17 May 2025 02:12:47 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.2.
- istio.io/istio has been upgraded to 1.25.2.
- solo.io/istio has been upgraded to v1.25.2-solo.
- solo-io/ext-auth-service has been upgraded to v0.68.1.
- solo-io/ext-auth-service has been upgraded to v0.68.0.
- spiffe/spire has been upgraded to v1.12.1.
- solo-io/skv2 has been upgraded to v0.43.3.
Fixes
- External service wildcard routes can now be routed via egress gateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19934)
- Adds GRPCRoute to the gloo-mesh-analyzer's RBAC rules. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20679)
- "fixes issue where iat jwt claim was being validated when it is for informational purposes only" (https://github.com/solo-io/gloo-mesh-enterprise/issues/20598)
- Fixes the graph storybook that is started with `make ui-testing-storybook`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20497)

v2.7.2 (v2.7.0)

Mon, 28 Apr 2025 10:57:16 GMT

Dependency Bumps
- redis/redis has been upgraded to 7.4.2-alpine.
- github.com/getkin/kin-openapi has been upgraded to v0.131.0.
- alpine/alpine has been upgraded to 3.21.
- nginx/nginx has been upgraded to 1.27.4-alpine-slim.
- oapi-codegen/oapi-codegen has been upgraded to v2.4.1.
- prometheus/prometheus has been upgraded to v2.53.4.
- solo-io/skv2 has been upgraded to v0.42.2.
- istio.io/api has been upgraded to v1.25.2.
- istio.io/client-go has been upgraded to v1.25.2.
- sigs.k8s.io/kind has been upgraded to v0.27.0.
Fixes
- Fixes race condition where getting cluster name via annotation could cause panics (https://github.com/solo-io/gloo-mesh-enterprise/issues/16342)
- Fixes bug where translation_warning and translation_error do not decrement as expected when errors/warnings resolve (https://github.com/solo-io/gloo-mesh-enterprise/issues/19493)
- In the Dashboard UI, expand Gloo Gateway delegated routes under their parent route rules. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19519)
- Add hover, drag and highlight effects to graph (https://github.com/solo-io/gloo-mesh-enterprise/issues/19684)
- The environment health information in the UI main Dashboard and Cluster Details pages is now more useful. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20070)
- Minify the `values.schema.json` files in the Helm charts. This prevents us from running into the new maximum file sizes [introduced by Helm](https://github.com/helm/helm/commit/e4da49785aa6e6ee2b86efd5dd9e43400318262b) in `v3.17.3`, causing the chart to be unusable. There is no functional change. Users can still prettify the values using tools like `jq` if needed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20411)
- Support ServiceEntry backends on HTTPRoute details pages in the Dashboard UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20437)
- Insight BP0005 will now only fire when translation is actually disabled. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20471)
- "allow both lower- and uppercase feature gate flag in HelmEnableCondition for ConfigDistribution" (https://github.com/solo-io/gloo-mesh-enterprise/issues/20296)
- Fixes a bug whereby an insight would incorrectly fire for deployments in an Ambient mesh claiming "missing-control-plane". (https://github.com/solo-io/gloo-mesh-enterprise/issues/20295)
- Fixes a bug where invalid EnvoyFilters were generated when a ForwardTo route with regexRewrite or autoHostRewrite was invalid. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20400)
- "All table rows with detail links / yaml are now clickable instead" (https://github.com/solo-io/gloo-mesh-enterprise/issues/20149)
- "Tweaked site navigation sidebar to address design feedback." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20353)
- "Tweaked tables to address design feedback." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20354)
- "Tweaked table pagination to address design feedback." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20356)
- "App footer removed as per design feedback." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20462)
- "Updated status filter input to address design feedback." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20355)
- Fixes the storybook stories for the new and old graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19691)
- "Addressed some HTTP vs TCP graph feedback + fixed settings bug." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20222)
- Fixes the directions of TCP graph traffic in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20214)
- Shows the new graph settings button even when there is no data. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20315)
- Only one drawer on the graph page is now allowed to be open at once. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20299)
- Adds a performance metrics section to the graph in the UI when the graph debugging feature flag is enabled. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20051)
- Updates the graph so that moving nodes up or left outside their container does not move the rest of the nodes in their container along with them. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20232)
- "The summary on insight details drawer now supports markdown." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20251)
- "Loading spinner sizes standardized and polishing to match design." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20357)
- "Remaining UI list pages updated to have filters in topbar." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20137)
- Updates UI packages to fix vulnerabilites. Also fixes warning messages when running yarn commands. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20345)
- Fix a bug that caused an insight to incorrectly fire for Istio incompatibility when no such incompatibility existed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20295)

v2.7.1 (v2.7.0)

Thu, 27 Mar 2025 20:45:53 GMT

Dependency Bumps
- solo-io/envoy-gloo-ee has been upgraded to v1.27.7-patch5.
- solo-io/rate-limiter has been upgraded to v0.12.5.
- solo-io/ext-auth-service has been upgraded to v0.66.1.
- solo-io/otel-collector has been upgraded to v0.2.1.
- golang/go has been upgraded to v1.23.7.
- golang.org/x/oauth2 has been upgraded to v0.27.0.
- solo-io/ext-auth-service has been upgraded to v0.66.2.
- solo-io/rate-limiter has been upgraded to v0.12.6.
- solo-io/otel-collector has been upgraded to v0.2.2.
Fixes
- Adds support for amending the rate-limiter deployment to enable oTel tracing`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14749)
- "Fixes relay race condition where a new pull stream could be established before the mgmt server finished
- "Adds metrics to the agent that help to determine the health of the relay connection,
- Replace custom graph implementation with SoloChart in DetailsTab (https://github.com/solo-io/gloo-mesh-enterprise/issues/19681)
- Monitoring on the dashboard is now filtered by data plane clusters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20141)
- The display of YAML in the UI is now more readable, especially on wider screens. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19885)
- Edge improvements for self-referencing nodes (https://github.com/solo-io/gloo-mesh-enterprise/issues/20115)
- Add support for the injaTemplate.dynamicMetadataValues.jsonToProto field in request and response transformations configured by TransformationPolicies. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17724)
- Fix CFG0069 insight for orphaned RouteOptions, ensuring it is not fired for RouteOptions that are referenced by
- Update ubuntu runner image for PR workflows.
- Fix issue where insights-engine doesn't handle license changes. This happened because we didn't check errors returned from the run
- The new observability graph now has the full screen abilities the previous had. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19682)
- Fix a bug whereby insights would not be triggered when re-enabled via removal from the InsightsConfig CR. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19994)
- spire: create spire-ca secret using IssuedCertificate flow (https://github.com/solo-io/gloo-mesh-enterprise/issues/16276)
- "Updated cert page + dashboard card to match feedback." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19913)
- "Updated cluster overview with new design." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20030)
- "UI temp color names updated to match new design system." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20122)
- Refactored the dashboard sections of the UI and apiserver. Also removed the leftover and unused dashboard and services page components and apiserver handlers. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19586)
- Adds a way to view the graph JSON on the graph page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20083)
- Fixes an issue with the new graph where hidden nodes were not fully being removed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19986)
- Fixes an issue where the graph would flicker when first loaded. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20056)
- Recalculate layout when filters change. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20049)
- Addresses refactoring and typescript type requests for the new graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20013)
- Fixes a bug where external services could break the infra graph display. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20094)
- Add reset layout button to graph (https://github.com/solo-io/gloo-mesh-enterprise/issues/20050)
- Add ability for graph nodes to expand their parents on drag (https://github.com/solo-io/gloo-mesh-enterprise/issues/19680)
- Add tooltips to the new graph controls (https://github.com/solo-io/gloo-mesh-enterprise/issues/20054)
- Fix disappearing graph edges when changing routes (https://github.com/solo-io/gloo-mesh-enterprise/issues/20139)
- "License dropdown moved from topbar to sidebar." (https://github.com/solo-io/gloo-mesh-enterprise/issues/20031)
- Updates the font weights in the Action column of our tables. (https://github.com/solo-io/gloo-mesh-enterprise/issues/119942)
- Improves the initial UX of the KGatewayDetails page by expanding some of the accordions. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19943)
- Fixes the tracing path to be passed in correctly when tracing is enabled. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20152)
- "tweaked topbar and site layout to better match doc and prevent weird cuttoff." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19671)
- "Workspace details and overview design polished to address feedback." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19525)
- "Overview pages now show 20 rows by default, and table rows are now less tall." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19882)
- "Details headers now once again display apiserver errors below themselves." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19932)

v2.7.0 (v2.7.0)

Thu, 27 Feb 2025 23:45:45 GMT

Extra Notes
- This release contained no user-facing changes.

v2.7.0-rc2 (v2.7.0)

Mon, 17 Feb 2025 22:16:57 GMT

Dependency Bumps
- k8s.io/client-go has been upgraded to v0.32.1.
- helm.sh/helm has been upgraded to v3.17.0.
- go.opentelemetry.io/collector has been upgraded to v0.116.0.
- sigs.k8s.io/controller-runtime has been upgraded to v0.20.0.
- istio.io/istio has been upgraded to 1.25.0-alpha.0.
Fixes
- "Bump up default MaxGrpcMessageSize on analyzer and make it configurable as a flag, also bump up limits of gloo-telemetry-collector" (https://github.com/solo-io/gloo-mesh-enterprise/issues/18507)
- "Dashboard Resources card now properly shows when intentended." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19239)
- "Dashboard Health cards now always show and support showing when 'not installed'." (https://github.com/solo-io/gloo-mesh-enterprise/issues/15747)
- "Updated doc links after 2.7 changes." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19739)
- Update certs insight code and apiserver functions to only return valid certificate insight information to the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19505)
- Fixes a bug in cluster warming when the management server doubles as an agent. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19528)
- The chart in the new graph's edge details drawer now shows the errors dataset above the requests dataset. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19808)
- The position of the nodes in the new graph now persist when data is refetched. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19692)
- The edges should no longer disconnect from their nodes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19678)
- istio-analyzer: correctly detect default gloo-operator revision
- When using gloo-operator for ILM, the default revision is "gloo"
- With this change, if a "gloo" is detected as a revision, we assume
- Fix error when users are trying to configure rate-limiter redis in clustered mode by wrapping the value in quotes before passing to kubernetes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19583)
- "Cluster Services card now only shows n/a when insights engine isn't running." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19759)
- "Cluster Services card now links to destinations overview page." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19758)
- "Dashboard health card items are now either proper links or no longer act as links." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19777)
- "Duplicate errors on dashboard are now consolidated." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19770)
- "Fixed license dropdown design getting compressed." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19781)
- "Welcome page simplified to only show necessary links." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19600)
Helm Changes
- Fix redis-client-config file so that when the management server is not enabled the config file will be empty by
New Features
- Add a check to the `meschtl check` command to verify that the installed version of Istio is compatible with Gloo Mesh Enterprise. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18460)
- "Create NetworkGraph using react-flow (currently only viewable in storybook and beta URLs)." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19132)
- "Cluster Details page update to new design." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19265)
- "Prevent unwanted values in SoloText truncate" (https://github.com/solo-io/gloo-mesh-enterprise/issues/19694)
- "Gloo Insights Engine metrics and snapshots can now be found by port-forwarding the gloo-mesh-ui pod on port 9094." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19630)
- "Added permission checks in UI dashboard for traffic monitoring, FIPS, and Zero Trust" (https://github.com/solo-io/gloo-mesh-enterprise/issues/19754)
- "Insights page update to new design." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19634)
- "Tracing page now uses new empty design." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19601)
- "Workspaces details page's design updated to match mocks." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19525)

v2.7.0-rc1 (v2.7.0)

Sat, 25 Jan 2025 22:54:04 GMT

Dependency Bumps
- istio.io/istio has been upgraded to 1.24.0-rc.0.
- istio.io/api has been upgraded to v1.24.0-rc.0.
- istio.io/client-go has been upgraded to v1.24.0-rc.0.
- opentelemetry/opentelemetry-collector has been upgraded to v0.113.0.
- opentelemetry/opentelemetry-collector-contrib has been upgraded to v0.113.0.
- solo.io/otelmetricsprocessor has been upgraded to v0.113.0.
- solo.io/gloo-otelcollector-contrib has been upgraded to v0.113.0.
- spiffe/spire has been upgraded to v1.11.0.
- solo-io/ext-auth-plugins has been upgraded to v0.2.3.
- solo-io/solo-apis has been upgraded to gloo-v1.18.0-beta33.
- solo-io/ext-auth-service has been upgraded to v0.64.0.
- golang/go has been upgraded to v1.23.3.
- solo-io/ext-auth-service has been upgraded to v0.64.1.
- golang.org/x/crypto has been upgraded to v0.31.0.
- golang.org/x/net has been upgraded to v0.33.0.
- solo-io/gloo-operator has been upgraded to v0.1.0-beta.2.
- solo-io/gloo-operator has been upgraded to v0.1.0-beta.1.
- solo-io/gloo-operator has been upgraded to v0.1.0-beta.3.
Fixes
- "Allow specifying the port type in the hostInfoOverrides for EW gateways. By default ports are assumed
- The UI's graph now handles depreciated control values being found without crashing. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18899)
- Fix [CVE-2024-41110](https://avd.aquasec.com/nvd/cve-2024-41110) in gloo-otel-collector image (https://github.com/solo-io/gloo-mesh-enterprise/issues/19120)
- Fix [GHSA-87m9-rv8p-rgmg](https://github.com/advisories/GHSA-87m9-rv8p-rgmg) in gloo-otel-collector image (https://github.com/solo-io/gloo-mesh-enterprise/issues/19120)
- Fix [CVE-2024-24790](https://avd.aquasec.com/nvd/cve-2024-24790) in gloo-otel-collector image (https://github.com/solo-io/gloo-mesh-enterprise/issues/19120)
- Fix [CVE-2024-34156](https://avd.aquasec.com/nvd/cve-2024-34156) in gloo-otel-collector image (https://github.com/solo-io/gloo-mesh-enterprise/issues/19120)
- "Adds policy validation rules to the host field on `VirtualDestination` that can't currently be performed pre-admission.
- Fixed a graph display bug introduced in an earlier 2.7 branch (https://github.com/solo-io/gloo-mesh-enterprise/issues/19151)
- "Check if required CRDs are installed before starting certain agent controllers and restart if those CRDs are added later,
- Fix CVE-2024-45338 in otel-collector image (https://github.com/solo-io/gloo-mesh-enterprise/issues/19410)
- Fix CVE-2024-45337 in otel-collector image (https://github.com/solo-io/gloo-mesh-enterprise/issues/19410)
- Error lists from the apiserver no longer crash the UI home page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19546)
- Fix bug whereby resources with status condition generation out of sync with the resource generation would be considered
- "For the GGUI and GMC UI, we should return filters based on KubernetesCluster and namespace CRs. For the Gloo Mesh Enterprise UI, should return filters based on validated workspaces." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19129)
- Allow `gloo-mesh-redis` to be deployed for either `gloo-mesh-ui` or `gloo-mesh-mgmt-server` is also available. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19008)
- Fix bug whereby GatewayClass resources owned by Istio controllers would show up as "Failed" in the UI when missing
- "In ILM repeat translation with latest inputs and outputs on leader election" (https://github.com/solo-io/gloo-mesh-enterprise/issues/19086)
- Replace gloo-otel-collector image with otel-collector, which is an identical image but has an independent release cycle. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15208)
- "Restart management server to reload new CRD schema when changes to any of the watched CRD schemas are detected" (https://github.com/solo-io/gloo-mesh-enterprise/issues/18718)
- "Resource types with duplicate names renamed slightly to show up as expected in alphabetical list." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19190)
- "If graph UI crashes cache is now cleared." (https://github.com/solo-io/gloo-mesh-enterprise/issues/18783)
Helm Changes
- "Disable logs/ui otel pipeline by default and hide Logs page by default. To opt-in to this feature,
- "Remove the glooUi.basePath helm value." (https://github.com/solo-io/gloo-mesh-enterprise/issues/18144)
- "Fix the glooUi.tracing.port helm value so that the helm template renders it." (https://github.com/solo-io/gloo-mesh-enterprise/issues/18675)
New Features
- "A fresher look for yaml and other code display in the UI." (https://github.com/solo-io/gloo-mesh-enterprise/issues/18933)
- Duplicate error notifications in UI banners now get bundled for cleaner display. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18951)
- "Support referencing a VirtualDestination as a destination service in RateLimitServerConfig and RateLimitServerSettings." (https://github.com/solo-io/gloo-mesh-enterprise/issues/18999)
- Adds a TCPRoute details page, and updates the K8s Gateway page to include TCPRoutes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19489)
- "Introduces Traffic Monitoring Cards on main Overview Dashboard with insights into RPS, Errors, and Latency for Gloo Gateway." (https://github.com/solo-io/gloo-mesh-enterprise/issues/18791)
- "Enable searching for Routes (e.g. K8s Gateway API HTTPRoutes) in the Gloo UI by fields in the route object spec (e.g. path prefix)." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19469)
- Pull apiserver start logic into insights-engine to decrease amount of pods for UI (https://github.com/solo-io/gloo-mesh-enterprise/issues/19072)
- Implement in-memory storage for insights-engine (https://github.com/solo-io/gloo-mesh-enterprise/issues/19124)
- Adds a new feature gate controlled by the helm value `featureGates.enableDefaultTcpKeepalive`. When set to true, all VirtualDestinations are configured with tcpKeepalive by default, removing the need to create a ConnectionPolicy to enable tcpKeepalive. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18585)
- Adds pre-admission [validation rules](https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation-rules) to the `ConnectionPolicy` CRD's `tcpKeepalive` fields. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18585)
- Adds support for Azure Distributed Claims when using JWT authentication in ExtAuthPolicy (https://github.com/solo-io/gloo-mesh-enterprise/issues/14760)
- "ExternalService: add support for specifying a credential name for mTLS" (https://github.com/solo-io/gloo-mesh-enterprise/issues/19453)
- Adds support for adding annotations to the ext-auth-service ServiceAccount, used by the ext-auth-service Deployment, with new helm value `extAuthService.extAuth.serviceAccount.extraAnnotations`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16415)
- Enable the distribution of Gloo Gateway config via the mgmt server. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18646)
- Gateway Distribution: Distribute Gateway config tree to target clusters using gloo.solo.io/distribute-to annotation. When this annotation is set on the Gateway resource, the entire config tree associated with the Gateway (HTTPRoutes, RouteOptions, Upstreams, etc.) are snapshotted to the target cluster in the original Gateway's namespace. The Gateway namespace is expected to be present on all target clusters. The snapshotted resources in the target cluster provide the gloo.solo.io/distributed-source and gloo.solo.io/distributed-source-root to refer back to the original source and source's root using the fully qualified resource URI, for tracking purpose. This replaces the GatewayClass based distribution selection mechanism. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18646)
- Adds the apiserver handler and UI updates for the HTTPRoute details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19372)
- "Updated design for UI notifications and alert boxes." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19481)
- Certificates page updated to use new design elements. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19131)
- Clusters page updated to use new design elements. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19004)
- Dashboard page updated to match new designs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18805)
- Dashboard page updated to match new designs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18971)
- Traffic monitoring card updated to be closer to new designs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18791)
- Health card updated to be closer to new designs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15747)
- Dashboard page refactored to use context data. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18805)
- Dashboard page refactored to use context data. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18971)
- Traffic monitoring card refactored to use context data. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18791)
- Health card refactored to use context data. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15747)
- New dashboard page created to match new designs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18805)
- New dashboard page created to match new designs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18971)
- New dashboard page created to match new designs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18791)
- Gateways page updated to use new design elements. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19099)
- Resources page updated to use new design elements. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19114)
- "Insights and Security Insights page now use new design elements." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19145)
- "Loading indicator update with new design." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19306)
- "Api and Portal overview pages updated to use new design." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19353)
- "New drawer design added to UI and YAML modals updated to use it." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19383)
- "Updated design for Workspaces, Ingress, and Egress pages." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19161)
- "Gloo logo now appears while waiting for UI to render." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19294)
- "Added new dropdown that combines multiple dropdowns into one." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19542)
- "Multi yaml modal and other syntax highligher modals updated to use drawers." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19408)
- Adds the new dashboard certs card handler, sort by expiration date, and hooks up the UI to use it. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19352)
- "Sidebar updated and new resource pages added for Gloo Gateway license." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19232)
- "New welcome page added with limited functionality." (https://github.com/solo-io/gloo-mesh-enterprise/issues/19219)

v2.7.0-beta1 (v2.7.0)

Wed, 06 Nov 2024 18:04:33 GMT

Breaking Changes
- Gloo's ext-auth-service now merges failed auth responses with the same response code in a || case.
Dependency Bumps
- opentelemetry/opentelemetry-collector has been upgraded to v0.102.1.
- opentelemetry/opentelemetry-collector-contrib has been upgraded to v0.102.0.
- solo.io/otelmetricsprocessor has been upgraded to v0.102.0.
- solo.io/gloo-otelcollector-contrib has been upgraded to v0.102.0.
- k8s.io/api has been upgraded to v0.31.1.
- k8s.io/apimachinery has been upgraded to v0.31.1.
- k8s.io/client-go has been upgraded to v0.31.1.
- k8s.io/kubectl has been upgraded to v0.31.1.
- sigs.k8s.io/controller-runtime has been upgraded to v0.19.0.
- solo-io/ext-auth-service has been upgraded to v0.58.3.
- solo-io/envoy-gloo-ee has been upgraded to v1.27.7-patch4.
- solo-io/ext-auth-service has been upgraded to v0.59.2.
- solo-io/go-utils has been upgraded to v0.25.3.
- solo-io/ext-auth-service has been upgraded to v0.58.2.
- solo-io/rate-limiter has been upgraded to v0.12.2.
- solo-io/solo-apis has been upgraded to gloo-v1.18.0-beta26.
- solo-io/ext-auth-service has been upgraded to v0.59.4.
Fixes
- "Fix a race in redis readAll pipeline execution that causes resource churn." (https://github.com/solo-io/gloo-mesh-enterprise/issues/15960)
- The dashboard UI backend now watches only the Secret and ConfigMap needed for configuring dashboard authentication, improving apiserver memory usage in environments where the management cluster has a large number of Secrets or ConfigMaps. The Dashboard resource now requires a restart of the gloo-mesh-ui pod when certain configuration changes are made. The dashboard reconciler snapshot is now visible at the dashboard UI admin endpoint. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15739)
- AuthorizationPolicies should not be regenerated unnecessarily when selectors share the same values across different properties. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15976)
- gloo-mesh-agent will no longer attempt to write resources to non-existent namespaces. This will reduce errors of the form "namespaces [ns] not found" and "unable to create new content in namespace [ns] because it is being terminated" in the agent when namepsace are deleted. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16361)
- The UI now handles issues from the Istio news list more gracefully. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16365)
- "Fixes constant regeneration of a RootTrustPolicy's IssuedCertificates caused by an incorrect assumption on the location of corresponding Mesh objects." (https://github.com/solo-io/gloo-mesh-enterprise/issues/17229)
- Set the `ReconcilerRelationshipWrites` feature flag on the management server to `false`
- Remove deprecated relationship reporting feature. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17257)
- Ensure delegated RouteTables with the same weight on the same route are sorted by creationTimestamp. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17266)
- Information pills in the UI should now better display long bits of information. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17386)
- Enhances the VirtualDestinationWorkspacePolicyOverride feature flag to make it so that we only use subset routing if
- Fixed an issue where the agent FIPS images were not being built correctly.
- Update CODEOWNERS to give ownership of cypress tests to the UI team. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17566)
- Fixed an issue where using a VirtualDestination resource in a non-mesh cluster to point to an external auth server would result
- Fixed an issue where using a VirtualDestination resource in a non-mesh cluster to point to an external auth server would result
- Fix telemetry config templating so redis stream endpoint are only set when they are left empty in helm user values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17687)
- Fix `gloo-multi-redis` suite by removing redis stream endpoint values so the template can handle updating the values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17939)
- The ExtAuthPolicy details page in the dashboard UI now displays HMAC and OPA Server configurations correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17776)
- Change the default value of the `safeModeAutoSkipWarming` feature to `true`. This will cause safe mode not to trigger
- "Fixes a race condition in redis client's Clean method where smember sets could change during a tx.
- Pills in the UI which have svgs in their labels are now better vertically aligned. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18023)
- Make sure messages related to lengthy daemonset rollout are propagated to ILM status (https://github.com/solo-io/gloo-mesh-enterprise/issues/18032)
- The graph is now more helpful when all node data is Idle and Idle Nodes are being hidden. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18064)
- "Having a route policy that selects multiple workloads with overlapping labels creates multiple EnvoyFilters that are
- Make portal redis certs volumes optional. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18107)
- Fix bug causing VirtualDestination EastWest traffic to drop with certain service selectors. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18376)
- Disabling insights now disables the Logs page in the UI dashboard.
- "Fix for JWTPolicy translation not taking into account a multi-revision installation scenario for istio_authn filter removal in 1.21." (https://github.com/solo-io/gloo-mesh-enterprise/issues/18615)
- The management server should no longer segfault when it encounters an ApiDoc using an OpenAPI v3.1 spec. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18619)
- Fixes a bug where an even number of apiKeyAuth configs referencing the same secrets in a single ExtAuthPolicy resource would result in secret changes not being picked up. (https://github.com/solo-io/ext-auth-service/issues/769)
- Fixes an admission-time validation bug that prevented the LoadBalancerPolicy's `spec.config.consistentHash.httpCookie.ttl` field from being set to a zero value such as "0s". (https://github.com/solo-io/gloo-mesh-enterprise/issues/18468)
- Policy detail pages now return a proper warning status when no translation report is found. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17306)
- Cluster details page now has a Yaml button in its header. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17134)
- "Ensure that solo_io_insights metric reflects insights in storage after insights engine restarts" (https://github.com/solo-io/gloo-mesh-enterprise/issues/17162)
- Support installing gloo helm charts in custom namespaces. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18823)
- "Remove the UI EXPERIMENTAL_DISABLE_UI_GLOBAL_STATUS_READS env variable." (https://github.com/solo-io/gloo-mesh-enterprise/issues/17339)
- "Reduce the config size and number of connections opened to oauth providers when multiple JWTPolicies are applied to routes on the same tls ingress gateway" (https://github.com/solo-io/gloo-mesh-enterprise/issues/17388)
- meshctl/external-workload: make onboard command resilient
- The GME VM integration workshop surfaced timing and connectivity
- See https://github.com/solo-io/gloo-mesh-enterprise/issues/18480
- The fix includes increasing the gRPC context timeout and making
- Add credentialName field to ExternalService TLS configuration.
- Add insecureSkipVerify field to ExternalService TLS configuration.
- "Ignore updates from the relay cache for local cluster resources" (https://github.com/solo-io/gloo-mesh-enterprise/issues/18525)
- "Handle edge case in Connection Policy TCP Keepalive stanza when time and interval are both set to 0, not nil." (https://github.com/solo-io/gloo-mesh-enterprise/issues/18143)
- "Handle edge case in Connection Policy TCP Settings stanza where connectTimeout must be >=1ms." (https://github.com/solo-io/gloo-mesh-enterprise/issues/18143)
- "meshctl check now throws an error for deployments that are set to 0 replicas." (https://github.com/solo-io/gloo-mesh-enterprise/issues/16285)
- "prevent agent from receiving stale translated outputs" (https://github.com/solo-io/gloo-mesh-enterprise/issues/16788)
- "fix resource status flickering" (https://github.com/solo-io/gloo-mesh-enterprise/issues/18172)
- "build gloo-mesh-ui images using solo proxy images that use verified envoy builds" (https://github.com/solo-io/gloo-mesh-enterprise/issues/18046)
- "Add NamespaceScoped Pod RBAC permissions to the gloo-mesh-ui" (https://github.com/solo-io/gloo-mesh-enterprise/issues/14665)
- "Add NamespaceScoped Configmap RBAC permissions to the gloo-mesh-ui" (https://github.com/solo-io/gloo-mesh-enterprise/issues/15739)
- Fixed a data race issue when applying GLM resources that select the management cluster.
- "Allows Gloo Mesh Core to correctly select and diagnose ambient workloads for single revisioned and side-by-side installations of Ambient." (https://github.com/solo-io/gloo-mesh-enterprise/issues/17325)
- Support connecting to a TLS enabled Prometheus instance for `gloo-insights-engine` component. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18454)
- "When a customer wants to deploy prometheus in gloo-mesh with a configMap instead of a secret for the prometheus settings, a secret with no name is also created. This fix tells helm to no longer generate a secret if a configMap is to be used." (https://github.com/solo-io/gloo-mesh-enterprise/issues/18696)
- `invertMatch` now supports header merging semantics between child and parent route tables, similar to existing header merging semantics. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17366)
- "Optimise PD cel validation rule so it doesn't exceed allocated budget" (https://github.com/solo-io/gloo-mesh-enterprise/issues/18930)
- "Handle writes/deletes of empty cluster-GVK correctly in RedisPersistenceClient.Write()" (https://github.com/solo-io/gloo-mesh-enterprise/issues/18177)
- Allow user-defined redisstream endpoint to take priority of default values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17687)
- Revert meshctl profiles back defaulting to mTLS (https://github.com/solo-io/gloo-mesh-enterprise/issues/17279)
- Adds admission-time validation to prevent setting a destination subset to an empty map, i.e. {}, in a RouteTable, which would previously result in resources not being propagated as expected. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18514)
- opt-in support for resolving host and port conflicts in east-west gateway namespaces (https://github.com/solo-io/gloo-mesh-enterprise/issues/17487)
- warn against duplicate ports when host/port conflict resolution is enabled (https://github.com/solo-io/gloo-mesh-enterprise/issues/18512)
- "Ensure all Gloo Platform CR statuses are correctly displayed in the Gloo UI Solo resources list." (https://github.com/solo-io/gloo-mesh-enterprise/issues/17017)
- Tweaked how `apiserverErrors` are displayed, and fixed some places they weren't being used. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16836)
- Dashboard certificates card now properly detects title length when moving marker. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18189)
- Removed the UI code for the Node Connectivity Card, Network Policies Card,
- Various small UI tweaks based on design feedback. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18273)
- WASM Policy disabled in UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18579)
- Egress disabled in the UI until it can be reworked. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18153)
- UI Graph footer button hover text converted to normal tooltips. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18075)
- Changed default graph refresh rate + graph charts now fail more gracefully. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18722)
- Timeline chart on graph nodes now properly renders when both an ingoing and
- Added a tooltip for clarity when ILM is greyed out on the dashboard's Istio tab. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17906)
- Ingress list overview update to remove empty links. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18364)
- GraphQL mock resolvers are now correctly identified on the GraphQL details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10481)
- Fixes the table styles so that the header's background fills the header section when it loads on a hidden tab (https://github.com/solo-io/gloo-mesh-enterprise/issues/16489)
- "Updated the recommended resolution steps for when Kubernetes Gateway API CRDs are not present to reflect the upstream recommendation." (https://github.com/solo-io/gloo-mesh-enterprise/issues/18116)
- Fixed an issue where the full client configuration for redis was not being set within apiserver and insights-engine components. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17628)
- Fixes an admission-time validation bug that prevented the LoadBalancerPolicy's `spec.config.warmupDurationSecs` and `spec.config.updateMergeWindow` fields from being set to zero values such as "0s". (https://github.com/solo-io/gloo-mesh-enterprise/issues/18468)
Helm Changes
- Update telemetryGateway config value to use empty object instead of null as default value to handle new upstream validation logic.
- Update telemetryCollector configmap to only setup otlp exporter when deployed in workload clusters and add validation logic when
- Upgrade `opentelemtry-collector` helm chart to `v0.93.3`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17172)
- Add support for pulling images from a private registry for the rate-limiter/ext-auth-service components. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15196)
- Adds support for setting the number of replicas in the rate-limiter deployment using new helm value `rateLimiter.rateLimiter.replicas`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17328)
- Adds support for amending the ext-auth-service and rate-limiter deployments using new helm values `extAuthService.extAuth.deploymentOverrides` and `rateLimiter.rateLimiter.deploymentOverrides` respectively. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5489)
- Set `optional` field for redis auth/certs settings. This is helpful as auth can be enabled
- Add `endpoint` key for `glooAnalyzer` which can be used to change the otlp endpoint.
- Update the prometheus-community chart to 25.23.0, which updates Prometheus to v2.53.0 (https://github.com/solo-io/gloo-mesh-enterprise/issues/17601)
- "If namespacedRbac.namespaces is an empty list but namespacedRbac.resources is not, we will use a sane default of the Release.Namespace instead of ignoring the namespacedRbac.resources input." (https://github.com/solo-io/gloo-mesh-enterprise/issues/15739)
- "The helm value telemetryGatewayCustomization.pipelines.logs/redis_stream_cilium_flows.enabled is now set to false by default.
- Add extraVolumes/extraVolumeMounts fields, so users can mount extra resources to gloo platform pods. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17955)
- "Remove the unused glooNetwork.agent helm values. This used to install a gloo-network-agent container for metrics collection, but these metrics are no longer used." (https://github.com/solo-io/gloo-mesh-enterprise/issues/17057)
New Features
- Add validation for TransformationPolicy to `meschctl x validate resources` experimental command.
- Enhance VirtualDestination translation to propagate backing service labels in remote clusters onto local workloadentries, enabling richer failover prioritization. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17985)
- The browser UI has taken its first steps in to a new look! (https://github.com/solo-io/gloo-mesh-enterprise/issues/18950)
- Added support for custom delimiters in JWT auth for appending headers with claims to header. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15229)
- Add resource status to kubectl print output for selected resources. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8712)
- Adds support for setting environment variables in the ext-auth-service and rate-limiter deployments using new helm values `extAuthService.extraEnvs` and `rateLimiter.extraEnvs` respectively. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18337)
- "Adds a new sub-command to meshctl experimental which checks various Istio and Kubernetes configurations for issues which would inhibit migrations/interop from sidecar to ambient." (https://github.com/solo-io/gloo-ambient-ee/issues/186)
- Clusters now display when `skipWarming` is `true` in their status. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16181)
- Support `telemetryCollector` running as a deployment. This includes updates to automatically disable
- Adds pre-admission [validation rules](https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation-rules) to the `ExtAuthPolicy` CRD. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16010)
- Add FIPS variant for OTel collector images (https://github.com/solo-io/gloo-mesh-enterprise/issues/18257)
- Add FIPS variant to release-containers build target for portal-server (https://github.com/solo-io/gloo-mesh-enterprise/issues/18258)
- "Added new check-issue experimental meshctl sub-command. This command can be used
- Add API Key Metadata to the request state when API Keys are retrieved from external storages (Redis, Aerospike) (https://github.com/solo-io/gloo-mesh-enterprise/issues/10271)
- Adds ExtAuthPolicy support for OIDC claims with array values. Previously, a claim with an array value under `spec.configs[].oauth2.oidcAuthorizationCode.identityToken.claimsToHeaders` or `spec.configs[].oauth2.oidcAuthorizationCode.accessToken.claimsToHeaders` would be ignored and a JWTPolicy would be required in addition to the ExtAuthPolicy to add such a claim to a header. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18462)
- "Add support for subset label inputs in ProgressiveDelivery resource, so that they match the same inputs that are already used in RouteTable" (https://github.com/solo-io/gloo-mesh-enterprise/issues/18930)
- "Enhanches the output for meshctl x interop-check for improved clarity" (https://github.com/solo-io/gloo-mesh-enterprise/issues/18080)
- Adds support for setting the ILM and GLM fields `spec.installations.skipUpgradeValidation` from helm using new helm values `istioInstallations.controlPlane.installations.skipUpgradeValidation` and `istioInstallations.northSouthGateways.installations.skipUpgradeValidation` or `istioInstallations.eastWestGateways.installations.skipUpgradeValidation`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18162)
- Sidebar updated to match new designs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18972)
- Added initial UI code for Gloo Gateway license support. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18748)
- Graph node details now shows it's principle.
- UI Dashboard now lists a target istio version when CVEs exist on the current one. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17858)
- Adds support for verbose logging of gRPC requests from the UI in the browser. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18006)
- UI Resource list page now updates url with filter values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17766)
- Adds SWR dump information and the troubleshooting docs link to the initial browser console message. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18074)
- Workspace details page now lets the user view both Workspace and Workspace Settings yamls. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17352)
- A new `virtualServiceAnnotations` field has been added to the RouteTable spec.

v2.6.13 (v2.6.0)

Tue, 29 Jul 2025 17:17:32 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.5.
- solo-io/rate-limiter has been upgraded to v0.12.7.
- solo-io/ext-auth-service has been upgraded to v0.58.10.
- golang/go has been upgraded to v1.24.4.
Fixes
- VirtualDestination warning about missing backing workloads will now appear on the CR instead of in the logs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19983)

v2.6.12 (v2.6.0)

Fri, 30 May 2025 17:07:26 GMT

v2.6.11 (v2.6.0)

Thu, 15 May 2025 14:28:15 GMT

Dependency Bumps
- golang/go has been upgraded to v1.24.2.
- redis/redis has been upgraded to 7.4.2-alpine.
- github.com/getkin/kin-openapi has been upgraded to v0.131.0.
- alpine/alpine has been upgraded to 3.21.
- nginx/nginx has been upgraded to 1.27.4-alpine-slim.
- oapi-codegen/oapi-codegen has been upgraded to v2.4.1.
- prometheus/prometheus has been upgraded to v2.53.4.
- solo-io/skv2 has been upgraded to v0.42.2.
- solo.io/istio has been upgraded to v1.22.8-patch1-solo.
- solo-io/ext-auth-service has been upgraded to v0.58.9.
- solo-io/ext-auth-service has been upgraded to v0.58.8.
- solo-io/skv2 has been upgraded to v0.43.3.
- solo-io/skv2 has been upgraded to v0.42.0.
- k8s.io/api has been upgraded to v0.32.2.
- k8s.io/apimachinery has been upgraded to v0.32.2.
- k8s.io/client-go has been upgraded to v0.32.2.
- sigs.k8s.io/controller-runtime has been upgraded to v0.20.1.
Fixes
- Fixes race condition where getting cluster name via annotation could cause panics (https://github.com/solo-io/gloo-mesh-enterprise/issues/16342)
- External service wildcard routes can now be routed via egress gateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19934)
- Minify the `values.schema.json` files in the Helm charts. This prevents us from running into the new maximum file sizes [introduced by Helm](https://github.com/helm/helm/commit/e4da49785aa6e6ee2b86efd5dd9e43400318262b) in `v3.17.3`, causing the chart to be unusable. There is no functional change. Users can still prettify the values using tools like `jq` if needed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/20411)
- "fixes issue where iat jwt claim was being validated when it is for informational purposes only" (https://github.com/solo-io/gloo-mesh-enterprise/issues/20598)

v2.6.10 (v2.6.0)

Wed, 26 Mar 2025 23:21:18 GMT

Dependency Bumps
- solo-io/rate-limiter has been upgraded to v0.12.5.
- solo-io/ext-auth-service has been upgraded to v0.58.6.
- solo-io/otel-collector has been upgraded to v0.1.5.
- golang/go has been upgraded to v1.23.7.
- golang.org/x/oauth2 has been upgraded to v0.27.0.
- solo-io/ext-auth-service has been upgraded to v0.58.7.
- solo-io/rate-limiter has been upgraded to v0.12.6.
- solo-io/otel-collector has been upgraded to v0.1.6.
Fixes
- Adds support for amending the rate-limiter deployment to enable oTel tracing`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14749)
- Added a new `warning` status for VirtualDestinations which select a service port with a name not following Istio's port convention.
- "Fixes relay race condition where a new pull stream could be established before the mgmt server finished
- "Adds metrics to the agent that help to determine the health of the relay connection,
- Update certs insights that retrieve certs from Secrets to not fire when certs are configured for storage in Vault (https://github.com/solo-io/gloo-mesh-enterprise/issues/19505)
- istio-analyzer: correctly detect default gloo-operator revision
- When using gloo-operator for ILM, the default revision is "gloo"
- With this change, if a "gloo" is detected as a revision, we assume
- "If graph UI crashes cache is now cleared." (https://github.com/solo-io/gloo-mesh-enterprise/issues/18783)

v2.6.9 (v2.6.0)

Thu, 30 Jan 2025 05:04:09 GMT

Fixes
- Fixes a bug in cluster warming when the management server doubles as an agent. (https://github.com/solo-io/gloo-mesh-enterprise/issues/19528)

v2.6.8 (v2.6.0)

Mon, 20 Jan 2025 20:24:43 GMT

Fixes
- "ExternalService: add support for specifying a credential name for mTLS" (https://github.com/solo-io/gloo-mesh-enterprise/issues/19453)
- Replace gloo-otel-collector image with otel-collector, which is an identical image but has an independent release cycle. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15208)

v2.6.7 (v2.6.0)

Tue, 24 Dec 2024 20:55:35 GMT

Dependency Bumps
- solo-io/ext-auth-service has been upgraded to v0.58.5.
- golang.org/x/crypto has been upgraded to v0.31.0.
- golang.org/x/net has been upgraded to v0.33.0.
Fixes
- The management server should no longer segfault when it encounters an ApiDoc using an OpenAPI v3.1 spec. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18619)
- Fix [CVE-2024-28860](https://avd.aquasec.com/nvd/cve-2024-28860) in gloo-otel-collector image (https://github.com/solo-io/gloo-mesh-enterprise/issues/19046)
- Fix [CVE-2024-37307](https://avd.aquasec.com/nvd/cve-2024-37307) in gloo-otel-collector image (https://github.com/solo-io/gloo-mesh-enterprise/issues/19046)
- Fix [CVE-2024-41110](https://avd.aquasec.com/nvd/cve-2024-41110) in gloo-otel-collector image (https://github.com/solo-io/gloo-mesh-enterprise/issues/19046)
- Fix [GHSA-87m9-rv8p-rgmg](https://github.com/advisories/GHSA-87m9-rv8p-rgmg) in gloo-otel-collector image (https://github.com/solo-io/gloo-mesh-enterprise/issues/19046)
- Fix [CVE-2024-24790](https://avd.aquasec.com/nvd/cve-2024-24790) in gloo-otel-collector image (https://github.com/solo-io/gloo-mesh-enterprise/issues/19046)
- Fix [CVE-2024-34156](https://avd.aquasec.com/nvd/cve-2024-34156) in gloo-otel-collector image (https://github.com/solo-io/gloo-mesh-enterprise/issues/19046)
- "In ILM repeat translation with latest inputs and outputs on leader election" (https://github.com/solo-io/gloo-mesh-enterprise/issues/19086)
- Fix CVE-2024-45337 and CVE-2024-45338 in gloo-otel-collector (https://github.com/solo-io/gloo-mesh-enterprise/issues/19410)
- "Restart management server to reload new CRD schema when changes to any of the watched CRD schemas are detected" (https://github.com/solo-io/gloo-mesh-enterprise/issues/18718)
Helm Changes
- "Remove the glooUi.basePath helm value." (https://github.com/solo-io/gloo-mesh-enterprise/issues/18144)
- "Fix the glooUi.tracing.port helm value so that the helm template renders it." (https://github.com/solo-io/gloo-mesh-enterprise/issues/18675)

v2.6.6 (v2.6.0)

Thu, 31 Oct 2024 13:10:18 GMT

Dependency Bumps
- solo-io/envoy-gloo-ee has been upgraded to v1.27.7-patch4.
- solo-io/ext-auth-service has been upgraded to v0.58.4.
Fixes
- Add validation for TransformationPolicy to `meschctl x validate resources` experimental command.
- "Having a route policy that selects multiple workloads with overlapping labels creates multiple EnvoyFilters that are
- Added support for custom delimiters in JWT auth for appending headers with claims to header. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15229)
- "When a customer wants to deploy prometheus in gloo-mesh with a configMap instead of a secret for the prometheus settings, a secret with no name is also created. This fix tells helm to no longer generate a secret if a configMap is to be used." (https://github.com/solo-io/gloo-mesh-enterprise/issues/18696)
- Add API Key Metadata to the request state when API Keys are retrieved from external storages (Redis, Aerospike) (https://github.com/solo-io/gloo-mesh-enterprise/issues/10271)
- Adds ExtAuthPolicy support for OIDC claims with array values. Previously, a claim with an array value under `spec.configs[].oauth2.oidcAuthorizationCode.identityToken.claimsToHeaders` or `spec.configs[].oauth2.oidcAuthorizationCode.accessToken.claimsToHeaders` would be ignored and a JWTPolicy would be required in addition to the ExtAuthPolicy to add such a claim to a header. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18462)
- Adds admission-time validation to prevent setting a destination subset to an empty map, i.e. {}, in a RouteTable, which would previously result in resources not being propagated as expected. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18514)
- opt-in support for resolving host and port conflicts in east-west gateway namespaces (https://github.com/solo-io/gloo-mesh-enterprise/issues/17487)
- warn against duplicate ports when host/port conflict resolution is enabled (https://github.com/solo-io/gloo-mesh-enterprise/issues/18512)
- Changed default graph refresh rate + graph charts now fail more gracefully. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18722)

v2.6.5 (v2.6.0)

Fri, 04 Oct 2024 14:54:57 GMT

Fixes
- Disabling insights now disables the Logs page in the UI dashboard.
- "Fix for JWTPolicy translation not taking into account a multi-revision installation scenario for istio_authn filter removal in 1.21." (https://github.com/solo-io/gloo-mesh-enterprise/issues/18615)

v2.6.4 (v2.6.0)

Mon, 23 Sep 2024 21:56:56 GMT

Dependency Bumps
- solo-io/go-utils has been upgraded to v0.25.3.
Fixes
- meshctl/external-workload: make onboard command resilient
- The GME VM integration workshop surfaced timing and connectivity
- See https://github.com/solo-io/gloo-mesh-enterprise/issues/18480
- The fix includes increasing the gRPC context timeout and making
- Add credentialName field to ExternalService TLS configuration.
- Add insecureSkipVerify field to ExternalService TLS configuration.
- "Ignore updates from the relay cache for local cluster resources" (https://github.com/solo-io/gloo-mesh-enterprise/issues/18525)
- "build gloo-mesh-ui images using solo proxy images that use verified envoy builds" (https://github.com/solo-io/gloo-mesh-enterprise/issues/18046)
- WASM Policy disabled in UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18579)
- Ingress list overview update to remove empty links. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18364)
- Fixes an admission-time validation bug that prevented the LoadBalancerPolicy's `spec.config.warmupDurationSecs` and `spec.config.updateMergeWindow` fields from being set to zero values such as "0s". (https://github.com/solo-io/gloo-mesh-enterprise/issues/18468)

v2.6.3 (v2.6.0)

Thu, 05 Sep 2024 13:36:13 GMT

Fixes
- Make sure messages related to lengthy daemonset rollout are propagated to ILM status (https://github.com/solo-io/gloo-mesh-enterprise/issues/18032)
- Fixes an admission-time validation bug that prevented the LoadBalancerPolicy's `spec.config.consistentHash.httpCookie.ttl` field from being set to a zero value such as "0s". (https://github.com/solo-io/gloo-mesh-enterprise/issues/18468)
- "fix resource status flickering" (https://github.com/solo-io/gloo-mesh-enterprise/issues/18172)
- "Add Pod RBAC permissions to the gloo-mesh-ui" (https://github.com/solo-io/gloo-mesh-enterprise/issues/14665)
- Update post-release codegen for test helm CRD snapshots (https://github.com/solo-io/gloo-mesh-enterprise/issues/18308)
- "Enhanches the output for meshctl x interop-check for improved clarity" (https://github.com/solo-io/gloo-mesh-enterprise/issues/18080)

v2.6.2 (v2.6.0)

Wed, 28 Aug 2024 01:06:28 GMT

Fixes
- Fix bug causing VirtualDestination EastWest traffic to drop with certain service selectors. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18376)

v2.6.1 (v2.6.0)

Thu, 22 Aug 2024 22:10:18 GMT

Fixes:
- Fixes a bug where an even number of apiKeyAuth configs referencing the same secrets in a single ExtAuthPolicy resource would result in secret changes not being picked up.
- Set the `ReconcilerRelationshipWrites` feature flag on the management server to `false` and the `disable-relationship-reporting` pod argument on gloo-mesh-ui to `true` by default.
- This will turn off by default the UI feature showing relationships between platform input and Istio output resources.
- The feature will be removed in a future release.
- Fixes a race condition in redis client's Clean method where smember sets could change during a tx.
- Also, fixes a bug in HA mode where mgmt cluster is omitted from active cluster list, causing data plane outage if a KubernetesCluster event occurs.
- Reduce the config size and number of connections opened to oauth providers when multiple JWTPolicies are applied to routes on the same tls ingress gateway
- Handle edge case in Connection Policy TCP Keepalive stanza when time and interval are both set to 0, not nil.
- Handle edge case in Connection Policy TCP Settings stanza where connectTimeout must be >=1ms.
- Ensure all Gloo Platform CR statuses are correctly displayed in the Gloo UI Solo resources list.
- Egress disabled in the UI until it can be reworked.
- Timeline chart on graph nodes now properly renders when both an ingoing and
- outgoing edge are pressent with an RPS greater than 0.
- UI Dashboard now lists a target istio version when CVEs exist on the current one.
- Doc links updated to point to `/latest` to match docs site directory change.
- Updated the recommended resolution steps for when Kubernetes Gateway API CRDs are not present to reflect the upstream recommendation.
Helm:
- Add support for pulling images from a private registry for the rate-limiter/ext-auth-service components.

v2.6.0 (v2.6.0)

Thu, 15 Aug 2024 20:17:01 GMT

Extra Notes
- This release contained no user-facing changes.

v2.6.0-rc3 (v2.6.0)

Sat, 10 Aug 2024 03:04:00 GMT

Fixes
- "Fix a race in redis readAll pipeline execution that causes resource churn." (https://github.com/solo-io/gloo-mesh-enterprise/issues/15960)
- Fixed an issue where using a VirtualDestination resource in a non-mesh cluster to point to an external auth server would result
- Fixed an issue where using a VirtualDestination resource in a non-mesh cluster to point to an external auth server would result
- Fix telemetry config templating so redis stream endpoint are only set when they are left empty in helm user values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17687)
- Fix `gloo-multi-redis` suite by removing redis stream endpoint values so the template can handle updating the values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17939)
- Make portal redis certs volumes optional. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18107)
- "Handle writes/deletes of empty cluster-GVK correctly in RedisPersistenceClient.Write()" (https://github.com/solo-io/gloo-mesh-enterprise/issues/18177)
New Features
- Enhance VirtualDestination translation to propagate backing service labels in remote clusters onto local workloadentries, enabling richer failover prioritization. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17985)

v2.6.0-rc2 (v2.6.0)

Fri, 19 Jul 2024 20:10:56 GMT

Dependency Bumps
- opentelemetry/opentelemetry-collector has been upgraded to v0.102.1.
- opentelemetry/opentelemetry-collector-contrib has been upgraded to v0.102.0.
- solo.io/otelmetricsprocessor has been upgraded to v0.102.0.
- solo.io/gloo-otelcollector-contrib has been upgraded to v0.102.0.
- solo-io/ext-auth-service has been upgraded to v0.58.2.
- solo-io/rate-limiter has been upgraded to v0.12.2.
Fixes
- AuthorizationPolicies should not be regenerated unnecessarily when selectors share the same values across different properties. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15976)
- The UI now handles issues from the Istio news list more gracefully. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16365)
- "Fixes constant regeneration of a RootTrustPolicy's IssuedCertificates caused by an incorrect assumption on the location of corresponding Mesh objects." (https://github.com/solo-io/gloo-mesh-enterprise/issues/17229)
- Ensure delegated RouteTables with the same weight on the same route are sorted by creationTimestamp. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17266)
- Information pills in the UI should now better display long bits of information. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17386)
- Enhances the VirtualDestinationWorkspacePolicyOverride feature flag to make it so that we only use subset routing if
- Fixed an issue where the agent FIPS images were not being built correctly.
- The ExtAuthPolicy details page in the dashboard UI now displays HMAC and OPA Server configurations correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17776)
- Gate the new behavior of ignoring clusters that have never been connected during Redis safe mode checks
- Policy detail pages now return a proper warning status when no translation report is found. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17306)
- Clusters now display when `skipWarming` is `true` in their status. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16181)
- Cluster details page now has a Yaml button in its header. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17134)
- "Ensure that solo_io_insights metric reflects insights in storage after insights engine restarts" (https://github.com/solo-io/gloo-mesh-enterprise/issues/17162)
- "prevent agent from receiving stale translated outputs" (https://github.com/solo-io/gloo-mesh-enterprise/issues/16788)
- Fixed a data race issue when applying GLM resources that select the management cluster.
- "Allows Gloo Mesh Core to correctly select and diagnose ambient workloads for single revisioned and side-by-side installations of Ambient." (https://github.com/solo-io/gloo-mesh-enterprise/issues/17325)
- `invertMatch` now supports header merging semantics between child and parent route tables, similar to existing header merging semantics. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17366)
- Allow user-defined redisstream endpoint to take priority of default values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17687)
- Revert meshctl profiles back defaulting to mTLS (https://github.com/solo-io/gloo-mesh-enterprise/issues/17279)
- Removed the UI code for the Node Connectivity Card, Network Policies Card,
- Fixed an issue where the full client configuration for redis was not being set within apiserver and insights-engine components. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17628)
Helm Changes
- Update telemetryGateway config value to use empty object instead of null as default value to handle new upstream validation logic.
- Update telemetryCollector configmap to only setup otlp exporter when deployed in workload clusters and add validation logic when
- Upgrade `opentelemtry-collector` helm chart to `v0.93.3`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17172)
- Set `optional` field for redis auth/certs settings. This is helpful as auth can be enabled
- Update the prometheus-community chart to 25.23.0, which updates Prometheus to v2.53.0 (https://github.com/solo-io/gloo-mesh-enterprise/issues/17601)
New Features
- "Adds a new sub-command to meshctl experimental which checks various Istio and Kubernetes configurations for issues which would inhibit migrations/interop from sidecar to ambient." (https://github.com/solo-io/gloo-ambient-ee/issues/186)
- Adds pre-admission [validation rules](https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation-rules) to the `ExtAuthPolicy` CRD. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16010)
- A new `virtualServiceAnnotations` field has been added to the RouteTable spec.

v2.6.0-rc1 (v2.6.0)

Mon, 24 Jun 2024 18:03:46 GMT

Breaking Changes
- Require helm-based ILM (enabled by default for Gloo Mesh Core, but not Gloo Mesh Enterprise) to install Ambient (https://github.com/solo-io/gloo-mesh-enterprise/issues/16757)
Dependency Bumps
- k8s.io/api has been upgraded to v0.29.2.
- k8s.io/apimachinery has been upgraded to v0.29.2.
- k8s.io/client-go has been upgraded to v0.29.2.
- k8s.io/kubectl has been upgraded to v0.29.2.
- sigs.k8s.io/controller-runtime has been upgraded to v0.17.3.
- istio.io/istio has been upgraded to 1.21.1.
- k8s.io/api has been upgraded to v0.30.1.
- k8s.io/apimachinery has been upgraded to v0.30.1.
- k8s.io/client-go has been upgraded to v0.30.1.
- k8s.io/kubectl has been upgraded to v0.30.1.
- sigs.k8s.io/controller-runtime has been upgraded to v0.18.2.
- openpolicyagent/opa has been upgraded to v0.64.1.
- golang.org/x/net has been upgraded to v0.23.0.
Fixes
- In the dashboard UI, the access policy details page now shows all selected service accounts. The policy details page no longer shows duplicate destinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12266)
- Policies that are ignored or cause errors for routes with redirect or direct response actions
- Ensure that Gloo does not translate Istio resources into non-managed namespaces when a cluster is
- Fix a regression which caused virtual destinations that specified multiple ports to have intermittent cross-cluster
- The graph now properly prioritizes L7 cases when deciding on a mixed L4/L7 item. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17043)
- In the dashboard UI, the workspace of listener route tables attached to virtual gateways will now be properly displayed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17093)
- "Fix an issue where a TLS RouteTable route configuring duplicate, weighted forwardTo destinations results in an Istio VirtualService with duplicate matchers, which Istio will ignore.
- "Allows Gloo Mesh Analyzer to be started before Istio CRDs are installed, which supports ILM installations" (https://github.com/solo-io/gloo-mesh-enterprise/issues/17071)
- Reverting skipWarming change due to SIGSEV. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17206)
- "Fix CFG0054 to identify solo flavor of Istio CNI in Istio 1.22.x" (https://github.com/solo-io/gloo-mesh-enterprise/issues/17153)
- "Exclude GME Discovered objects from Insights Engine's resource filter" (https://github.com/solo-io/gloo-mesh-enterprise/issues/17007)
- Fixes pre-admission [validation rules](https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation-rules) for the `VirtualGateway` CRD which resulted in failure to install the CRD on k8s v1.28 due to complexity limits. Adds MaxItems 300,000 to listeners to reduce complexity. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16942)
- meshctl/external-workload: allow setting gateway's service account
- Due to a recent change in ILM, the east-west gateway's service
- Fix minor bug in GW discovery logic where the matchSelector was used instead of pod template labels. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17076)
- "When translating RouteTable direct response routes, in addition to creating an EnvoyFilter, also configure a direct response on the Istio VirtualService." (https://github.com/solo-io/gloo-mesh-enterprise/issues/16780)
- "Fixes false positive HLT0001 insights when istiod debug is disabled" (https://github.com/solo-io/gloo-mesh-enterprise/issues/17161)
- "Allows HLT0006 to detect unhealthy, revisioned ztunnels" (https://github.com/solo-io/gloo-mesh-enterprise/issues/17330)
- When using `redis.certs` we will now mount the given secret directly to pods that need to build redis clients. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16912)
- "Remove outputs from cache on agent disconnect.
- "translation_context.GetMeshFor() now returns the mesh with oldest version when revisions or discovery selectors are present" (https://github.com/solo-io/gloo-mesh-enterprise/issues/15421)
- Removed the resources button on an access policy details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17257)
- Delegated route matcher arrow now properly centered in all cases. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17230)
- Dashboard now checks for all istio insights when determining wether to show Istio tab. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17091)
- Graph nodes with more than one metric type will now show a more accurate health. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17043)
- UI logic for ghost nodes removed as they are no longer return by api server, (https://github.com/solo-io/gloo-mesh-enterprise/issues/16666)
- Fixed some layering on graph page that can cause dropdown to get cutoff by graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16626)
- RPS on graph is now calculated using latest value instead of average. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17046)
- Component layering updated for graph to avoid dropdown cutoff issues. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16626)
- Site banners no longer overlap Hubble UI or Tracing page contents. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16966)
- Fixed login link on welcome page causing a 404. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17300)
- Fixes issue causing all nodes to be treated as using http metrics. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17154)
- Resource page now correctly accounts for workspace statuses when filtering by status. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16611)
- Reverses the arrow for the expandable string list in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16777)
- Changing the filters on pages will no longer cause the healthy/unhealthy counts to flicker to 0 between loads. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16843)
- Dashboard Zero Trust card updated based on presence of ambient workloads. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13119)
- Fix status Garbage Collection when clusters are removed from the ILM. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16795)
- Fixed an issue where the "deny all traffic policy" did not function correctly on VirtualGateways without an
New Features
- The dashboard UI will now display delegated routes (HTTP routes with a `delegate` action)
- Add the ability to specify Istio chart repo and credentials for installing with helm from private registries (https://github.com/solo-io/gloo-mesh-enterprise/issues/13735)
- Adds pre-admission [validation rules](https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation-rules) to the `RouteTable` CRD. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15737)
- Historically, importing a VD into a new workspace will also import it's applied client-side policies from the
- Adds pre-admission [validation rules](https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation-rules) to the `RetryTimeoutPolicy` CRD. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16028)
- Adds a new `disableAdmissionValidation` value to the CRDs helm chart which, when set to true, disables the CRD schema validation on resource fields (such as minimum values, regex pattern checks, CEL rules, etc.) that by default occurs on resource admission to the Kubernetes cluster.
- Allows for the conditional installation of RateLimitConfig CRD.
- Enable helm-based ILM for Gloo Mesh Core (https://github.com/solo-io/gloo-mesh-enterprise/issues/16756)
- support side-by-side revisioned ztunnels in ILM (https://github.com/solo-io/gloo-mesh-enterprise/issues/16760)
- Add snapshot/insights/rate-limiter/ext-auth-service dedicated redis deployment to helm chart. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16310)
- Matchers on TLS routes now display their sni hosts. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17296)
- Workspace details page redesigned & virtual destinations tab added. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16533)
- Workspace Details page tab tables now have additional filters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7703)
- Adds pre-admission [validation rules](https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation-rules) to the `VirtualGateway` CRD. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15732)

v2.6.0-beta3 (v2.6.0)

Wed, 15 May 2024 15:54:52 GMT

Breaking Changes
- JWTPolicy resources can now be applied to east-west traffic via the applyToRoutes API.
- Add support for updating liveness and readiness probes of the OPA server in the ext-auth-service (https://github.com/solo-io/gloo-mesh-enterprise/issues/13014)
Dependency Bumps
- solo-io/skv2 has been upgraded to v0.38.6.
- solo-io/gloo-otelcollector-contrib has been upgraded to v0.89.0-3.
- solo-io/ext-auth-service has been upgraded to v0.56.8.
- solo-io/rate-limiter has been upgraded to v0.11.11.
- solo.io/ext-auth-service has been upgraded to v0.56.2.
- solo.io/ext-auth-service has been upgraded to v0.56.7.
- solo.io/rate-limiter has been upgraded to v0.11.10.
Fixes
- The dashboard UI will now display a banner indicating when a management server replica is in safe mode.
- Support having `ExternalService`s with wildcard host together with specific host even if
- Remove false error log "internal error: no client supplied but snapshot present for local cluster". (https://github.com/solo-io/gloo-mesh-enterprise/issues/12951)
- Remove false error log "internal error: no client supplied but snapshot present for local cluster" from upsert queue as well. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12951)
- Ensure api_id telemetry collector does not generate an error when the api_id attribute is nil. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14748)
- Rebuild the workspace cache whenever the labels on a workspace-defining resource are updated. This will fix some bugs related to workspace definitions and import / exports not being updated when Workspace or Namespace labels are updated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15465)
- Fix issue where invalid openapi spec causes bloating in RouteTable status. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15534)
- The dashboard UI should no longer crash when a user requests a GraphQL route that doesn't exist. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15893)
- The timeline graphs in the UI now have smoother transitions on data change. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15921)
- Change the behavior of AuthzPolicy creation when using ServiceIsolation. Previously,
- Fix an issue where the `gloo_mesh_safe_mode_active` metric did not reset when a KubernetesCluster CR was deleted. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16337)
- Fixes a bug occurring only when using single cluster deployments, where the issued certificates are deleted and recreated continuously, triggering constant reconciliations of the `cacerts` secret. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7430)
- Fixes a bug where the `IssuedCertificates` and `PodBounceDirectives` are not garbage collected after Istio installations are deleted. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16287)
- Some RBAC needed for Gloo Mesh Core features not respected in agent. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15940)
- Fix deterministic order of translation when multiple revisions of Istio control plane present. Allows for remote cluster endpoints to be translated as part of virtual destination backing service, even when the remote backing service and remote gateway are in different istiod revisions. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15421)
- Fix potential race condition in `controller-runtime` package by explicitly setting logger. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16419)
- "Fix bug where authentication headers aren't passed when control plane is deployed with simpleTLS for RootTrustPolicy translation" (https://github.com/solo-io/gloo-mesh-enterprise/issues/16384)
- "Fix a bug when upgrading while in TLS mode, where the agent would never become ready because it was looking for mTLS certificates." (https://github.com/solo-io/gloo-mesh-enterprise/issues/15388)
- The global workspace settings status is now correctly displayed in the workspace settings view. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16103)
- Fix nil pointer dereference if no gateway components are defined (https://github.com/solo-io/gloo-mesh-enterprise/issues/14880)
- Fix gloo platform helm template to properly specify multiple clusters for ILM (https://github.com/solo-io/gloo-mesh-enterprise/issues/11048)
- Adjust logging to no longer warn that ILM resources are not in a workspace (https://github.com/solo-io/gloo-mesh-enterprise/issues/14546)
- Allow deletion of ILM/GLM resource with no components installed (https://github.com/solo-io/gloo-mesh-enterprise/issues/16601)
- when using upstream chart for ILM, strip -solo and other flavors from chart version (https://github.com/solo-io/gloo-mesh-enterprise/issues/16063)
- verify that deleting an istio installation via the istio lifecycle agent also deletes ServiceAccounts (https://github.com/solo-io/gloo-mesh-enterprise/issues/9933)
- "Make leader election timeouts configurable so that lease renewals can adapt to environments where larger timeouts may be necessary, for e.g., in environments where Kube apiserver is experiencing degraded performance due to a high load." (https://github.com/solo-io/gloo-mesh-enterprise/issues/5637)
- "Add a warning note in the ExternalService's host field about the implications of having a wildcard with no endpoints." (https://github.com/solo-io/gloo-mesh-enterprise/issues/16123)
- On first reconcilation, we used to run the status reconciler for ALL objects in the given snapshot. This created objects with empty statuses, which leads to inconsistent behavior with our diff method. This changes that functionality so that we return early if no reports were found for that particular object. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16165)
- Fixing a bug where the UI Redis Exporter can sometimes garbage collect Analyzer log streams (https://github.com/solo-io/gloo-mesh-enterprise/issues/15490)
- "Fixing a bug where the UI Redis Exporter can sometimes garbage collect hubble log streams" (https://github.com/solo-io/gloo-mesh-enterprise/issues/15906)
- A race condition was identified that can be triggered during an upgrade to a newer Gloo Mesh Enterprise version. If hit, this failure mode can lead to partial translations on the Gloo management server which can result in Istio resources being incorrectly removed from the output snapshots that are sent to the Gloo agents. To resolve this issue, a new "Safe Mode" feature was added that is enabled by default. It can be controlled via `glooMgmtServer.safeMode` in the Helm chart.
- Fix shared-data race condition that could result in statuses being inconsistent or flickering between values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16200)
- Add logic to support TLS + Verify mode where relay-agent verify relay-server certificates and allow users
- Tries to show more information about the GraphQL API on its details page, even if there is a failed status (e.g. fails to find all the GraphQLResolverMap's destinations). (https://github.com/solo-io/gloo-mesh-enterprise/issues/16288)
- Fixes the GraphQL Explorer page link. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16399)
- "Fix the Dashboard CR translator so that the Gloo UI throws a useful error when it has an empty redis host."
- UI table cells now properly truncate text for name/namespace/cluster columns. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15885)
- Fixes an undefined variable bug with the istio versions list card. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16253)
- Some broken documentation links fixed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16239)
- Fixed broken documentation link on topbar dropdown. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16233)
- Fixed a column name being truncated on services page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16176)
- Adds better error handling to the GraphQL Details page if there are schema parsing errors. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16353)
- Adds functionality to view the SDL for stitched GraphQL APIs subschemas to the GraphQL details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7872)
- Removed text on empty graph state that was incorrect for services. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16659)
- Fixed "0" appearing on overview when no istio versions on a cluster. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15675)
- A pending status on a status ring on UI now gives a custom message when hovered over. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15597)
- Improved validation of RetryTimeoutPolicy fields to ensure translated resources are valid Istio resources. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15462)
- The object_write_fails_total agent metric is now scraped by default by the Gloo Platform telemetry pipeline.
Helm Changes
- "Allow users to configure the Dashboard CR spec.authn.oidc field via helm's `glooUi.auth.oidc` field." (https://github.com/solo-io/gloo-mesh-enterprise/issues/11620)
- Deterministic key generation for ext-auth-service signing key (https://github.com/solo-io/gloo-mesh-enterprise/issues/15587)
- Added helm value to configure redis io-threads configuration parameter (https://github.com/solo-io/gloo-mesh-enterprise/issues/15751)
- "New `meshctl` profiles for setting up with basic TLS" (https://github.com/solo-io/gloo-mesh-enterprise/issues/15161)
- Improved docs for helm redis ioThreads configuration parameter (https://github.com/solo-io/gloo-mesh-enterprise/issues/15751)
New Features
- Enable support for OpenTelemetry trace generation support during ext-auth-service Authorization checks. Traces
- Hoverover tooltips in the graph now give information split inbound/outbound where appropriate. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15098)
- "Allow users to configure Gloo Mesh Redis with persistence, both AOF and RDB modes are supported. See `redis.deployment.persistence` to learn more about the configuration options." (https://github.com/solo-io/gloo-mesh-enterprise/issues/15710)
- Adds pre-admission [validation rules](https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation-rules) to the `RetryTimeoutPolicy` CRD. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15733)
- Add context-aware validation tool to meshctl. This allows either the automatic connection to a running cluster,
- Adds pre-admission [validation rules](https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation-rules) to the `VirtualDestination` CRD. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16041)
- Adds a `failoverPriority` field to the `FailoverPolicy` CRD. This feature allows users to implement label-based failover between workloads
- Workspaces list now shows destination count instead of gateway. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15848)
- Adds pre-admission [validation rules](https://kubernetes.io/docs/tasks/extend-kubernetes/custom-resources/custom-resource-definitions/#validation-rules) to the `FaultInjectionPolicy` CRD. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15736)
- Added helm value to configure redis io-threads configuration parameter (https://github.com/solo-io/gloo-mesh-enterprise/issues/15751)
- "Support having multiple ExternalServices with the same host but different ports." (https://github.com/solo-io/gloo-mesh-enterprise/issues/13128)
- "Adds a state in the KubernetesCluster status to indicate that the cluster has ever been connected. If a cluster has never connected it follows the exact same logic path as the SkipWarming flag on the KubernetesCluster object currently triggers." (https://github.com/solo-io/gloo-mesh-enterprise/issues/15993)
- Gloo Platform will now use Solo's gloo-mesh container registry as a mirror for 3rd party images used in the Gloo Platform helm chart, such as Redis and Prometheus.
- Meshctl: adds experimental command to validate one or more custom resources
- "'meshctl x validate resources' adds summary section, and json files, for translation errors and warnings, and status errors and warnings" (https://github.com/solo-io/gloo-mesh-enterprise/issues/15896)
- A new `failureMode` option has been added to the RouteTable spec.
- Browser tab text now updated to reflect the current page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16742)
- Permission redirects now inform user why they are redirected, and these redirects no longer show up in history. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16689)
- Certain resource types now link to the type's corresponding details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15852)

v2.6.0-beta2 (v2.6.0)

Mon, 11 Mar 2024 21:57:59 GMT

Fixes
- Fix issue with rate limiting not working with GraphQL due to the use of a dummy host for the Envoy route. Gloo Mesh Agent now automatically generates Service Entries for dummy hosts to ensure Envoy routes recognize dummy hosts as valid. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12351)
- Dummy host names used by the system have been updated for ease of readability. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12351)
- Fix issue where Insights page could loop. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14803)
- Correctly remove resources from workspaces when those resources are no longer exported. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14912)
- Fixes an issue with discovering usage plans when using multiple portals. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14954)
- Fix workspace resource import/export status does not always update correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15018)
- Addressed an issue that prevented `VirtualDestinations` with different `clientModes` (e.g. one with the default TLS passthrough mode and one with the TLS termination one) from being correctly served by the same east-west gateway. This would most notably impact environments where a gateway need to route traffic cross-cluster to services that may or not be part of the mesh. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15075)
- Fix issue where the dashboard UI could crash when navigating the Workspace Details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15232)
- Fix a bug that would cause meschtl port-forward to fail in some cases. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15281)
- Fix logic and add unit tests around behavior when we're polling external services to generate APIDocs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15353)
- Cilium detail links on dashboard added now that all pages exist. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15050)
- Replace prometheus port annotation in our gloo-mesh deployments. Removing this annotation did not disrupt metrics but did result in verbose error logging. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14417)
- Bug caused from uysing line wrapping option on logs page fixed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15127)
- Node Connectivity card on dashboard now use a sum of all insights. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15221)
- Fixed istio version(s) not show up on cards on overview page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14275)
Helm Changes
- Fix a bug introduced in v2.5.0 where the redis.address helm value was ignored. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15269)
- added helm values `glooUi.prometheusBearerTokenFile`, `glooUi.prometheusCAFile` and `glooUi.prometheusSkipTLSVerify` to allow configuring the UI's connection to an external prometheus. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8759)
- "Add `agents` field under `glooMgmtServer` component in `gloo-platform` helm chart allowing users to register a list of workload clusters during installation." (https://github.com/solo-io/gloo-mesh-enterprise/issues/13973)
- "Add helm value `glooUi.auth.requestTimeout` with a default of 2 seconds to allow users to configure the timeout for external auth requests." (https://github.com/solo-io/gloo-mesh-enterprise/issues/11835)
- "Change the default timeout for Gloo UI external auth requests from 0.5s to 2s." (https://github.com/solo-io/gloo-mesh-enterprise/issues/11835)
- Remove `glooMgmtServer.registerCluster` requirement from `glooMgmtServer.createGlobalWorkspace` logic so users can
- Set `telemetryCollectorCustomization.skipVerify` to true in order to skip verification of the server certificate for the telemetry pipeline. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13972)
New Features
- "When creating workspaces with overlapping namespaces the one with an earlier creation
- Enable Gloo Mesh UI to work with Openshift prometheus. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8759)
- UI and apiserver hookup for Nodes overview page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15037)
- Add instrumentation to monitor insight garbage collection and analyzer log volume (https://github.com/solo-io/gloo-mesh-enterprise/issues/14095)
- Support tls options for the following:
- disable client certificate authentication on `gloo-mesh-mgmt-server`
- allow skipping server certificate verification on `gloo-mesh-agent` and `gloo-telemetry-collector`
- allow token authentication value to be passed in directly using environment variable (https://github.com/solo-io/gloo-mesh-enterprise/issues/13972)

v2.6.0-beta1 (v2.6.0)

Fri, 23 Feb 2024 22:46:35 GMT

Breaking Changes
- Prometheus-community chart has been updated to 25.11.0. If you are upgrading from Gloo Mesh <= 2.5.0, the prometheus-server deployment in the gloo-mesh namespace will be automatically deleted before the upgrade of the management plane. You can use the `prometheus.skipAutoMigration: true` Helm value to disable it and handle the migration manually. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13360)
- The gloo-mesh-ui flags `--platform-config-dir` and `--platform-config` flags have been removed as they are now no longer used.
- Update rate-limiter service and ext-auth-service to use compiler optimizations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14995)
Dependency Bumps
- solo-io/go-utils has been upgraded to v0.25.0.
- solo-io/licensing has been upgraded to v0.5.3.
- solo-io/licensing has been upgraded to v0.5.0.
- solo-io/go-utils has been upgraded to v0.25.1.
- golang.org/x/crypto has been upgraded to v0.17.0.
- solo.io/rate-limiter has been upgraded to v0.11.7.
- solo.io/ext-auth-service has been upgraded to v0.55.3.
- sigs.k8s.io/controller-runtime has been upgraded to v0.16.4-0.20231208143029-67d355d101a6.
- solo-io/ext-auth-service has been upgraded to v0.55.1.
- solo-io/rate-limiter has been upgraded to v0.11.5.
- solo-io/skv2 has been upgraded to v0.36.1.
- istio.io/istio has been upgraded to v1.20.1.
- solo.io/rate-limiter has been upgraded to v0.11.8.
- solo-io/skv2 has been upgraded to v0.36.4.
- solo-io/licensing has been upgraded to v0.5.2.
- solo.io/rate-limiter has been upgraded to v0.11.9.
- solo.io/ext-auth-service has been upgraded to v0.56.0.
- solo-io/external-apis has been upgraded to v0.2.6.
- solo-io/skv2 has been upgraded to v0.36.3.
Fixes
- Eliminated duplicate logging of translation errors, reduced logging errors in each tctx to post-translation, improved error messages for Services that are misconfigured. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10421)
- Put batch processors last in the list of processors in otel pipelines. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10883)
- Unnamed RouteTable routes would previously be given default names which would not be guaranteed to remain consistent across RouteTable updates. The method for creating default route names now results in consistent names across RouteTable updates if the route itself is not updated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12143)
- In the dashboard on the Workspace overview card, rename "Imported by workspaces" to "Imported Resources". (https://github.com/solo-io/gloo-mesh-enterprise/issues/13040)
- Improve UI query time and resource usage when loading API server pages. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13048)
- Fixes an issue where portal translated resources were in a endless creation/deletion loop. This occurred when the workspace of the portal object did not select the namespace and cluster where the `gloo-portal-server` lives in. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13158)
- Fix translation bug in the RouteTable translator where translated Istio resources (VirtualServices and EnvoyFilters) could exceed the Kubernetes 253 max character limit for Meta.Name values. The end result was Gloo failed to persist these translated resources to the desired clusters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13214)
- Changing filters on the graph now aborts previous calls to make multiple changes smoother. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13491)
- Select All has been removed from the graph filter options for better UX. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13491)
- Ensures that the relay push_client properly warms every time. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13502)
- Ensure mgmt-server crashes on startup with invalid/missing licenses. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14113)
- Ensure mgmt-server ignores invalid/deleted license updates at runtime. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14163)
- Fixes an issue where `ApiDoc` CRs generated by using a `ApiSchemaDiscovery` CR or through automatic discovery using service annotations would not be regenerated upon deletion of the `ApiDoc`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13743)
- Fixes an issue where a stitched `ApiDoc` would be unintentionally garbage collected in a single cluster setup. Also fixes an issue where the contents of the `PortalConfig` would not be updated when a `RouteTable` it selected was deleted. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13781)
- Fix regression introduced in 2.5.0-rc2 that affected import/export of GraphQL ApiDocs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13846)
- In the UI, the Insights and Security Insights pages will now pull the appropriate data when switching pages. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14261)
- Sort resources on the Workspace Details page in the dashboard consistently. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14378)
- Change the "gateway" counts in the UI dashboard to count the number of VirtualGateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14510)
- Reduce memory spiking in Redis by using ensuring tmp keys are only created when necessary. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14688)
- Reconcile Portal ApiDocs on ReplicaSet changes triggered by restarting or removing Deployments (https://github.com/solo-io/gloo-mesh-enterprise/issues/14698)
- Fixes bug where oldest retry timeout policy was not being used for conflicting retry timeout policies, and statuses were not being reported correctly on RouteTable. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14850)
- Update the prometheus-server-migration job image to be pulled from the quay.io/solo-io/kubectl repository. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14938)
- Do not abort prometheus-server-migration job run if Prometheus deployment does not exist. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15038)
- Fixed an issue where the `trimAllProxyConfig` option on the global `WorkspaceSettings` was not being inherited by non-global `WorkspaceSettings`. (https://github.com/solo-io/gloo-mesh-enterprise/9424)
- "Show total count of insights" (https://github.com/solo-io/gloo-mesh-enterprise/issues/13388)
- This updates the severity filter count logic for the affected pages. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14375)
- "Remove extra `enabled` field from helm reference docs" (https://github.com/solo-io/gloo-mesh-enterprise/issues/14736)
- Fixed an issue where cpu usage of the mgmt-server was higher than expected while idle. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15059)
- Fix deleting last object of a GVK in redis for relay snapshot updates. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13189)
- "Allows users to configure consecutive errors on Outlier Detection Policy to be 0. Previously, this would default the policy to 5. Now, if a user sets consecutive errors to 0, the envoy filter will be set to 0. If the user does not set consecutive errors, the envoy filter config will be set to 5." (https://github.com/solo-io/gloo-mesh-enterprise/issues/12609)
- Fix a regression in 2.5.0 when translating cross-workspace RouteTable imports.
- "Destination subsets that use the same label but have different values across Route Tables are now correctly set on DestinationRules." (https://github.com/solo-io/gloo-mesh-enterprise/issues/12065)
- Certificate overview and modal "issued to" text updated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13613)
- Ingress page title and icon updated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13612)
- Removed dots on dashboard health cards. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13610)
- Hides table tooltips when they are not needed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13616)
- Dashboard charts now properly update when values change. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14785)
- Dupe Gloo versions combined on dashboard health cards. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13622)
- Removed in/out of mesh links to service page when service page disabled. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14663)
- Dashboard & Cluster Details Health sections fixed to never be blank. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13570)
- UI Dashboard insights limit increased to prevent insights not being rendered. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13948)
- Slightly improves dashboard load speed by making api calls earlier. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13447)
- Dashboard now uses a separate limit for data plane insights. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14181)
- Includes a fix for the dashboard links loading states, and adds in the Hubble UI page link. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14883)
- Dashboard cards now show as empty when error occurs, and error now correctly displayed in banner. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14594)
- Cilium details page now only shows cilium tab when cluster has cilium data.
- Removed istio required link on dashboard when user doesn't have istio access. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14663)
- Debug page updated to have label filters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11247)
- Site sidebar now supports Network and Istio views. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13961)
- Graph filters now clear all properly and namespaces work as expected with workspaces no selected. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13724)
- On graph edge details hide "enforced by" if an edge is a ghost node (https://github.com/solo-io/gloo-mesh-enterprise/issues/14658)
- Opening the details modal no longer resets pagination on the insights page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14607)
- Adds several fixes for lighthouse and a11y best practices. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14250)
- Adds several fixes for lighthouse and a11y best practices. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14250)
- Adds the status column for policies back in to the UI resources page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14766)
- Fixed broken link to policy page on resources overview. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14564)
- Outlier policy details page now only shows `consecutive_errors` and
- Deep link to resource type removed except for access policy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13006)
- Resource page no longer shows empty namespaces on card view. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13435)
- Policy link on resources page now has correct link when resource doesn't have a workspace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13716)
- Right side date fixed on root cert dashboard. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14356)
- Security Insights page rewritten to better match Insights page updates. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13564)
- This updates the Jaeger search in the service details tracing tab to pre-select the search option if possible. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13905)
- Services page now includes a label search. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14102)
- Updates the service landing page to show service labels. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7063)
- Active sidebar item is now still clickable on details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14820)
- Fixes the case when the kubernetes and gateway sidebar items are both highlighted when navigating to either of their pages. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14234)
- Updates the logic to always show the sidebar observibility section, and hide subsections based on feature flags. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14397)
- Table links updated to have standard look / wording. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13615)
- Updates the register cluster modal links to point to the correct docs site. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14051)
- ApiDocs that are used only in the context of the portal features do not need
- Usage plan information can now be computed correctly across workspaces. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13752)
Helm Changes
- Update the prometheus-community chart to 25.11.0, which updates Prometheus to v2.49.1 (https://github.com/solo-io/gloo-mesh-enterprise/issues/13360)
- Upgrade redis to 7.2.4 (https://github.com/solo-io/gloo-mesh-enterprise/issues/14524)
- Implement a Helm hook to re-deploy Prometheus automatically during the upgrade of the the prometheus-community chart from 19.7.2 to 25.11.0. The hook can be disabled by setting the `prometheus.skipAutoMigration` Helm value to `true`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14726)
- Allow users to override the image used in prometheus-server-migration job by setting the helm values `prometheus-server-migration.image`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14938)
- "Remove the helm and doc references to `legacyMetricsPipeline`, which was removed in v2.4." (https://github.com/solo-io/gloo-mesh-enterprise/issues/13590)
- Add the helm value `.glooUi.prometheusClientCertSecretName`. The name of the Secret containing the Prometheus
- Redis relay sync performance improvements introduce redis.connection.redisStreamSizeOverride to override the
- The experimental sidecar-accel feature has been removed (https://github.com/solo-io/gloo-mesh-enterprise/issues/13841)
New Features
- Added support for a new graph layout using the DOT engine (https://github.com/solo-io/gloo-mesh-enterprise/issues/11386)
- Selecting a version of Istio on the Cluster Details Landing page which now show the corresponding Overview section. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12220)
- The Cilium Health card in the UI now better explains what the options can mean for scalability. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14787)
- mTLS information has been added to the graph and egress pages. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13071)
- A new `license check` command has been added to meshctl to validate licenses before applying them to your cluster.
- The page to view the Logs in the UI is now enabled for anyone with a Gloo Mesh, Gloo Network, or Gloo Mesh Core license. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14964)
- The ZeroTrust card on the Dashboard now has a tooltip explaining how often it is polled. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14017)
- Gloo Mesh Enterprise now supports configuring the policy for the Adaptive Request Concurrency feature.
- Add support for controlling the output directory location for the archive
- Added a new option to `meshctl debug report` to dump the contents of the Redis database used by Gloo Mesh Enterprise. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13872)
- "Feature gates: add feature-gates API to UI's API server." (https://github.com/solo-io/gloo-mesh-enterprise/issues/13023)
- Ensure dashboard displays licensing error messages (https://github.com/solo-io/gloo-mesh-enterprise/issues/13720)
- "Cilium Hubble UI integration: Implements a custom Hubble backend that uses Redis to obtain namespace information and flow logs that are relayed to the Hubble frontend over grpc-web." (https://github.com/solo-io/gloo-mesh-enterprise/issues/13954)
- "Add HLT Insights for Istiod/Gateway deployment status check" (https://github.com/solo-io/gloo-mesh-enterprise/issues/12806)
- New `meshctl` profile to enable Cilium pod logs (https://github.com/solo-io/gloo-mesh-enterprise/issues/13593)
- Add Cilium pods logs to Gloo Mesh UI (https://github.com/solo-io/gloo-mesh-enterprise/issues/13592)
- Adds `consecutiveGatewayErrors` to the `OutlierDetection` policy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12611)
- Adds an AdaptiveRequestConcurrencyPolicy page to the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14280)
- Added day/time indicator and date range indicators to cert expiry dashboard card. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13177)
- Overlapping points on cert expiry dashboard card now combine into a single point. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13182)
- Cilium Health card added to dashboard. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13959)
- This adds links from the dashboard and cluster details cilium cards to the /logs page for cilium components. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13414)
- Added network policy cards to dashboard. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13957)
- Added Node Connectivity card to dashboard. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13955)
- Graph filter dropdowns now prompt user to select something when empty. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13723)
- Added a "--hubble-ui-base-path" option to the apiserver and a Hubble UI page to the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9723)
- Re enables the --hubble-ui-base-path option and adds an empty Hubble UI page if the option is not supplied. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14745)
- Change Severity dropdown on insights list page to pills with counts. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13389)
- Adds a line-wrap toggle button to the log viewer. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14103)
- This simply enables server TLS on the UI to allow encrypted traffic from a fronting load balancer to the UI instance. The TLS certificate will be mounted as a volume directly on the UI and will be automatically rotated when the Kubernetes secret is rotated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10255)
- Added page for workspaces overview. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14330)

v2.5.13 (v2.5.0)

Tue, 24 Dec 2024 21:21:37 GMT

Dependency Bumps
- solo-io/ext-auth-service has been upgraded to v0.56.11.
- golang.org/x/crypto has been upgraded to v0.31.0.
- golang.org/x/net has been upgraded to v0.33.0.
Fixes
- Fix [CVE-2024-28860](https://avd.aquasec.com/nvd/cve-2024-28860) in gloo-otel-collector image (https://github.com/solo-io/gloo-mesh-enterprise/issues/19121)
- Fix [CVE-2024-37307](https://avd.aquasec.com/nvd/cve-2024-37307) in gloo-otel-collector image (https://github.com/solo-io/gloo-mesh-enterprise/issues/19121)
- Fix [CVE-2024-41110](https://avd.aquasec.com/nvd/cve-2024-41110) in gloo-otel-collector image (https://github.com/solo-io/gloo-mesh-enterprise/issues/19121)
- Fix [GHSA-87m9-rv8p-rgmg](https://github.com/advisories/GHSA-87m9-rv8p-rgmg) in gloo-otel-collector image (https://github.com/solo-io/gloo-mesh-enterprise/issues/19121)
- Fix [CVE-2024-24790](https://avd.aquasec.com/nvd/cve-2024-24790) in gloo-otel-collector image (https://github.com/solo-io/gloo-mesh-enterprise/issues/19121)
- Fix [CVE-2024-34156](https://avd.aquasec.com/nvd/cve-2024-34156) in gloo-otel-collector image (https://github.com/solo-io/gloo-mesh-enterprise/issues/19121)
- Fix [CVE-2024-27289](https://avd.aquasec.com/nvd/cve-2024-27289) in gloo-mesh-mgmt-server image (https://github.com/solo-io/gloo-mesh-enterprise/issues/19121)
- Fix [CVE-2024-27304](https://avd.aquasec.com/nvd/cve-2024-27304) in gloo-mesh-mgmt-server image (https://github.com/solo-io/gloo-mesh-enterprise/issues/19121)
- Fix CVE-2024-45337 and CVE-2024-45338 in gloo-otel-collector (https://github.com/solo-io/gloo-mesh-enterprise/issues/19410)

v2.5.12 (v2.5.0)

Fri, 01 Nov 2024 14:56:39 GMT

Dependency Bumps
- solo-io/envoy-gloo-ee has been upgraded to v1.27.7-patch4.
Fixes
- "Having a route policy that selects multiple workloads with overlapping labels creates multiple EnvoyFilters that are
- The management server should no longer segfault when it encounters an ApiDoc using an OpenAPI v3.1 spec. (https://github.com/solo-io/gloo-mesh-enterprise/issues/18619)
- Added support for custom delimiters in JWT auth for appending headers with claims to header. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15229)

v2.5.11 (v2.5.0)

Fri, 04 Oct 2024 13:58:54 GMT

Dependency Bumps
- solo-io/ext-auth-service has been upgraded to v0.56.10.
Fixes
- "Fixes a race condition in redis client's Clean method where smember sets could change during a tx.
- Fixes a bug where an even number of apiKeyAuth configs referencing the same secrets in a single ExtAuthPolicy resource would result in secret changes not being picked up. (https://github.com/solo-io/ext-auth-service/issues/769)
- "Ignore updates from the relay cache for local cluster resources" (https://github.com/solo-io/gloo-mesh-enterprise/issues/18525)
- "fix resource status flickering" (https://github.com/solo-io/gloo-mesh-enterprise/issues/18172)
- "build gloo-mesh-ui images using solo proxy images that use verified envoy builds" (https://github.com/solo-io/gloo-mesh-enterprise/issues/18046)
- "Handle writes/deletes of empty cluster-GVK correctly in RedisPersistenceClient.Write()" (https://github.com/solo-io/gloo-mesh-enterprise/issues/18177)
- "Remove outputs from cache on agent disconnect.
- Doc links updated to point to `/2.5.x` to match docs site directory change. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17521)

v2.5.10 (v2.5.0)

Sat, 10 Aug 2024 03:45:35 GMT

v2.5.9 (v2.5.0)

Wed, 17 Jul 2024 17:58:02 GMT

Fixes
- The UI now handles issues from the Istio news list more gracefully. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16365)
- "Fixes constant regeneration of a RootTrustPolicy's IssuedCertificates caused by an incorrect assumption on the location of corresponding Mesh objects." (https://github.com/solo-io/gloo-mesh-enterprise/issues/17229)
- Set the `ReconcilerRelationshipWrites` feature flag on the management server to `false`
- Ensure delegated RouteTables with the same weight on the same route are sorted by creationTimestamp. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17266)
- Sort endpoints based on their attributes to prevent unintentional reordering between version caused by the implementation of go maps. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17269)
- Fixed an issue where the agent FIPS images were not being built correctly.
- The ExtAuthPolicy details page in the dashboard UI now displays HMAC and OPA Server configurations correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17776)
- "Ensure that solo_io_insights metric reflects insights in storage after insights engine restarts" (https://github.com/solo-io/gloo-mesh-enterprise/issues/17162)
- Fixed a data race issue when applying GLM resources that select the management cluster.
- `invertMatch` now supports header merging semantics between child and parent route tables, similar to existing header merging semantics. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17366)
- A new `virtualServiceAnnotations` field has been added to the RouteTable spec.

v2.5.8 (v2.5.0)

Fri, 28 Jun 2024 01:38:43 GMT

Fixes
- In the dashboard UI, the access policy details page now shows all selected service accounts. The policy details page no longer shows duplicate destinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12266)
- Policies that are ignored or cause errors for routes with redirect or direct response actions
- Fix a regression which caused virtual destinations that specified multiple ports to have intermittent cross-cluster
- AuthorizationPolicies should not be regenerated unnecessarily when selectors share the same values across different properties. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15976)
- In the dashboard UI, the workspace of listener route tables attached to virtual gateways will now be properly displayed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17093)
- "Fix an issue where a TLS RouteTable route configuring duplicate, weighted forwardTo destinations results in an Istio VirtualService with duplicate matchers, which Istio will ignore.
- Allows for the conditional installation of RateLimitConfig CRD.
- "Exclude GME Discovered objects from Insights Engine's resource filter" (https://github.com/solo-io/gloo-mesh-enterprise/issues/17007)
- "When translating RouteTable direct response routes, in addition to creating an EnvoyFilter, also configure a direct response on the Istio VirtualService." (https://github.com/solo-io/gloo-mesh-enterprise/issues/16780)
- Removed the resources button on an access policy details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17257)
- Dashboard now checks for all istio insights when determining wether to show Istio tab. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17091)
- Component layering updated for graph to avoid dropdown cutoff issues. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16626)
- Site banners no longer overlap Tracing page contents. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16966)
- Dashboard Zero Trust card updated based on presence of ambient workloads. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13119)
- Fixed an issue where the "deny all traffic policy" did not function correctly on VirtualGateways without an

v2.5.7 (v2.5.0)

Wed, 22 May 2024 23:50:57 GMT

Dependency Bumps
- solo-io/gloo-otelcollector-contrib has been upgraded to v0.89.0-3.
- solo-io/ext-auth-service has been upgraded to v0.56.8.
- solo-io/rate-limiter has been upgraded to v0.11.11.
- openpolicyagent/opa has been upgraded to v0.64.1.
- golang.org/x/net has been upgraded to v0.23.0.
- golang.org/x/net has been upgraded to v0.23.0.
Fixes
- The dashboard UI will now display a banner indicating when a management server replica is in safe mode.
- Ensure that Gloo does not translate Istio resources into non-managed namespaces when a cluster is
- The timeline graphs in the UI now have smoother transitions on data change. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15921)
- Change the behavior of AuthzPolicy creation when using ServiceIsolation. Previously,
- Fix an issue where the `gloo_mesh_safe_mode_active` metric did not reset when a KubernetesCluster CR was deleted. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16337)
- Adds a `failoverPriority` field to the `FailoverPolicy` CRD. This feature allows users to implement label-based failover between workloads
- Fixes a bug occurring only when using single cluster deployments, where the issued certificates are deleted and recreated continuously, triggering constant reconciliations of the `cacerts` secret. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7430)
- Fixes a bug where the `IssuedCertificates` and `PodBounceDirectives` are not garbage collected after Istio installations are deleted. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16287)
- "pkg/env: fix extraneous logging of environment variables so that this is not logged just because a package is imported, e.g by meshctl." (https://github.com/solo-io/gloo-mesh-enterprise/issues/16066)
- "Add a warning note in the ExternalService's host field about the implications of having a wildcard with no endpoints." (https://github.com/solo-io/gloo-mesh-enterprise/issues/16123)
- Fix potential race condition in `controller-runtime` package by explicitly setting logger. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16419)
- "Fix bug where authentication headers aren't passed when control plane is deployed with simpleTLS for RootTrustPolicy translation" (https://github.com/solo-io/gloo-mesh-enterprise/issues/16384)
- The global workspace settings status is now correctly displayed in the workspace settings view. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16103)
- Fix nil pointer dereference if no gateway components are defined (https://github.com/solo-io/gloo-mesh-enterprise/issues/14880)
- Fix gloo platform helm template to properly specify multiple clusters for ILM (https://github.com/solo-io/gloo-mesh-enterprise/issues/11048)
- Adjust logging to no longer warn that ILM resources are not in a workspace (https://github.com/solo-io/gloo-mesh-enterprise/issues/14546)
- Allow deletion of ILM/GLM resource with no components installed (https://github.com/solo-io/gloo-mesh-enterprise/issues/16601)
- "Support having multiple ExternalServices with the same host but different ports." (https://github.com/solo-io/gloo-mesh-enterprise/issues/13128)
- Fixing a bug where the UI Redis Exporter can sometimes garbage collect Analyzer log streams (https://github.com/solo-io/gloo-mesh-enterprise/issues/15490)
- Fix shared-data race condition that could result in statuses being inconsistent or flickering between values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16200)
- Add logic to support TLS + Verify mode where relay-agent verify relay-server certificates and allow users
- Tries to show more information about the GraphQL API on its details page, even if there is a failed status (e.g. fails to find all the GraphQLResolverMap's destinations). (https://github.com/solo-io/gloo-mesh-enterprise/issues/16288)
- Fixes the GraphQL Explorer page link. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16399)
- "Fix the Dashboard CR translator so that the Gloo UI throws a useful error when it has an empty redis host."
- Some broken documentation links fixed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16239)
- Fixed broken documentation link on topbar dropdown. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16233)
- Fixed a column name being truncated on services page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16176)
- Adds functionality to view the SDL for stitched GraphQL APIs subschemas to the GraphQL details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7872)
- Adds better error handling to the GraphQL Details page if there are schema parsing errors. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16353)
- Removed text on empty graph state that was incorrect for services. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16659)
- Resource page now correctly accounts for workspace statuses when filtering by status. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16611)
- Reverses the arrow for the expandable string list in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16777)
Helm Changes
- Add `extraExtensions` to otel collector and gateway to configure otel extensions. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16137)

v2.5.6 (v2.5.0)

Thu, 11 Apr 2024 21:42:15 GMT

Dependency Bumps
- solo.io/ext-auth-service has been upgraded to v0.56.2.
- solo.io/ext-auth-service has been upgraded to v0.56.7.
- solo.io/rate-limiter has been upgraded to v0.11.10.
Fixes
- Rebuild the workspace cache whenever the labels on a workspace-defining resource are updated. This will fix some bugs related to workspace definitions and import / exports not being updated when Workspace or Namespace labels are updated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15465)
- Add support for updating liveness and readiness probes of the OPA server in the ext-auth-service (https://github.com/solo-io/gloo-mesh-enterprise/issues/13014)
- Some RBAC needed for Gloo Mesh Core features not respected in agent. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15940)
- Emit Safe Mode (gloo_mesh_safe_mode_active) metric for each mgmt-server replica. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15864)
- UI table cells now properly truncate text for name/namespace/cluster columns. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15885)
Helm Changes
- Improved docs for helm redis ioThreads configuration parameter (https://github.com/solo-io/gloo-mesh-enterprise/issues/15751)

v2.5.5 (v2.5.0)

Sun, 31 Mar 2024 22:56:39 GMT

Fixes
- Support having `ExternalService`s with wildcard host together with specific host even if
- Remove false error log "internal error: no client supplied but snapshot present for local cluster". (https://github.com/solo-io/gloo-mesh-enterprise/issues/12951)
- Enable support for OpenTelemetry trace generation support during ext-auth-service Authorization checks. Traces
- Ensure api_id telemetry collector does not generate an error when the api_id attribute is nil. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14748)
- The dashboard UI should no longer crash when a user requests a GraphQL route that doesn't exist. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15893)
- Fix deterministic order of translation when multiple revisions of Istio control plane present. Adds IGNORE_REVISIONS_FOR_VIRTUAL_DESTINATION_TRANSLATION env to check if gateways belong to same mesh as backing service of VirtualDestination. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15421)
- "Make leader election timeouts configurable so that lease renewals can adapt to environments where larger timeouts may be necessary, for e.g., in environments where Kube apiserver is experiencing degraded performance due to a high load." (https://github.com/solo-io/gloo-mesh-enterprise/issues/5637)
- Fixed "0" appearing on overview when no istio versions on a cluster. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15675)
- A pending status on a status ring on UI now gives a custom message when hovered over. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15597)
- Certain resource types now link to the type's corresponding details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15852)
- Sidebar updated to use network license for cilium gating instead of insights. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15523)
Helm Changes
- "Allow users to configure the Dashboard CR spec.authn.oidc field via helm's `glooUi.auth.oidc` field." (https://github.com/solo-io/gloo-mesh-enterprise/issues/11620)
- Added helm value to configure redis io-threads configuration parameter (https://github.com/solo-io/gloo-mesh-enterprise/issues/15751)

v2.5.4 (v2.5.0)

Fri, 15 Mar 2024 02:10:42 GMT

Fixes
- "When creating workspaces with overlapping namespaces the one with an earlier creation
- JWTPolicy resources can now be applied to east-west traffic via the applyToRoutes API.
- Fixes an issue with discovering usage plans when using multiple portals. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14954)
- Fix workspace resource import/export status does not always update correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15018)
- Fix issue where invalid openapi spec causes bloating in RouteTable status. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15534)
- "Fix a bug when upgrading while in TLS mode, where the agent would never become ready because it was looking for mTLS certificates." (https://github.com/solo-io/gloo-mesh-enterprise/issues/15388)
- A new `failureMode` option has been added to the RouteTable spec.
- Fixed istio version(s) not show up on cards on overview page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14275)
- Improved validation of RetryTimeoutPolicy fields to ensure translated resources are valid Istio resources. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15462)
- The object_write_fails_total agent metric is now scraped by default by the Gloo Platform telemetry pipeline.
Helm Changes
- added helm values `glooUi.prometheusBearerTokenFile`, `glooUi.prometheusCAFile` and `glooUi.prometheusSkipTLSVerify` to allow configuring the UI's connection to an external prometheus. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8759)
- "Add helm value `glooUi.auth.requestTimeout` with a default of 2 seconds to allow users to configure the timeout for external auth requests." (https://github.com/solo-io/gloo-mesh-enterprise/issues/11835)
- "Change the default timeout for Gloo UI external auth requests from 0.5s to 2s." (https://github.com/solo-io/gloo-mesh-enterprise/issues/11835)
- Remove `glooMgmtServer.registerCluster` requirement from `glooMgmtServer.createGlobalWorkspace` logic so users can

v2.5.3 (v2.5.0)

Wed, 06 Mar 2024 14:04:35 GMT

Fixes
- Correctly remove resources from workspaces when those resources are no longer exported. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14912)
- Fix a bug that would cause meschtl port-forward to fail in some cases. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15281)
- Fix logic and add unit tests around behavior when we're polling external services to generate APIDocs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15353)
- Bug caused from uysing line wrapping option on logs page fixed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15127)
Helm Changes
- Fix a bug introduced in v2.5.0 where the redis.address helm value was ignored. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15269)

v2.5.2 (v2.5.0)

Thu, 29 Feb 2024 20:32:39 GMT

Dependency Bumps
- solo.io/rate-limiter has been upgraded to v0.11.9.
- solo.io/ext-auth-service has been upgraded to v0.56.0.
Fixes
- In the dashboard on the Workspace overview card, rename "Imported by workspaces" to "Imported Resources". (https://github.com/solo-io/gloo-mesh-enterprise/issues/13040)
- Fix translation bug in the RouteTable translator where translated Istio resources (VirtualServices and EnvoyFilters) could exceed the Kubernetes 253 max character limit for Meta.Name values. The end result was Gloo failed to persist these translated resources to the desired clusters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13214)
- Change the "gateway" counts in the UI dashboard to count the number of VirtualGateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14510)
- Add support for workload selectors in delegated route tables which will be used to filter the set of workloads to which the delegated resource applies. Previously, configuring workload selectors on delegated route tables would was not supported and would throw an error. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14571)
- Reconcile Portal ApiDocs on ReplicaSet changes triggered by restarting or removing Deployments (https://github.com/solo-io/gloo-mesh-enterprise/issues/14698)
- Fix issue where Insights page could loop. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14803)
- Update the prometheus-server-migration job image to be pulled from the quay.io/solo-io/kubectl repository. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14938)
- Do not abort prometheus-server-migration job run if Prometheus deployment does not exist. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15038)
- Addressed an issue that prevented `VirtualDestinations` with different `clientModes` (e.g. one with the default TLS passthrough mode and one with the TLS termination one) from being correctly served by the same east-west gateway. This would most notably impact environments where a gateway need to route traffic cross-cluster to services that may or not be part of the mesh. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15075)
- Fix issue where the dashboard UI could crash when navigating the Workspace Details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15232)
- Fixed an issue where cpu usage of the mgmt-server was higher than expected while idle. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15059)
- Support tls options for the following:
- disable client certificate authentication on `gloo-mesh-mgmt-server`
- allow skipping server certificate verification on `gloo-mesh-agent` and `gloo-telemetry-collector`
- allow token authentication value to be passed in directly using environment variable (https://github.com/solo-io/gloo-mesh-enterprise/issues/13972)
- Replace prometheus port annotation in our gloo-mesh deployments. Removing this annotation did not disrupt metrics but did result in verbose error logging. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14417)
Helm Changes
- Allow users to override the image used in prometheus-server-migration job by setting the helm values `prometheus-server-migration.image`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14938)
- "Add `agents` field under `glooMgmtServer` component in `gloo-platform` helm chart allowing users to register a list of workload clusters during installation." (https://github.com/solo-io/gloo-mesh-enterprise/issues/13973)
- Set `telemetryCollectorCustomization.skipVerify` to true in order to skip verification of the server certificate for the telemetry pipeline. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13972)

v2.5.1 (v2.5.0)

Fri, 16 Feb 2024 18:27:02 GMT

Breaking Changes
- Prometheus-community chart has been updated to 25.11.0. If you are upgrading from Gloo Mesh 2.5.0 or <= 2.4.9, the prometheus-server deployment in the gloo-mesh namespace will be automatically deleted before the upgrade of the management plane. You can use the `prometheus.skipAutoMigration: true` Helm value to disable it and handle the migration manually. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13360)
Dependency Bumps
- solo-io/licensing has been upgraded to v0.5.3.
- solo-io/licensing has been upgraded to v0.5.0.
- solo.io/rate-limiter has been upgraded to v0.11.8.
- solo-io/licensing has been upgraded to v0.5.2.
Fixes
- Eliminated duplicate logging of translation errors, reduced logging errors in each tctx to post-translation, improved error messages for Services that are misconfigured. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10421)
- Unnamed RouteTable routes would previously be given default names which would not be guaranteed to remain consistent across RouteTable updates. The method for creating default route names now results in consistent names across RouteTable updates if the route itself is not updated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12143)
- Improve UI query time and resource usage when loading API server pages. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13048)
- Ensures that the relay push_client properly warms every time. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13502)
- Ensure mgmt-server crashes on startup with invalid/missing licenses. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14113)
- Ensure mgmt-server ignores invalid/deleted license updates at runtime. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14163)
- Fixes an issue where `ApiDoc` CRs generated by using a `ApiSchemaDiscovery` CR or through automatic discovery using service annotations would not be regenerated upon deletion of the `ApiDoc`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13743)
- In the UI, the Insights and Security Insights pages will now pull the appropriate data when switching pages. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14261)
- A new `license check` command has been added to meshctl to validate licenses before applying them to your cluster.
- Sort resources on the Workspace Details page in the dashboard consistently. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14378)
- Reduce memory spiking in Redis by using ensuring tmp keys are only created when necessary. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14688)
- Fixes bug where oldest retry timeout policy was not being used for conflicting retry timeout policies, and statuses were not being reported correctly on RouteTable. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14850)
- Fixed an issue where the `trimAllProxyConfig` option on the global `WorkspaceSettings` was not being inherited by non-global `WorkspaceSettings`. (https://github.com/solo-io/gloo-mesh-enterprise/9424)
- Gloo Mesh Enterprise now supports configuring the policy for the Adaptive Request Concurrency feature.
- This updates the severity filter count logic for the affected pages. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14375)
- "Add HLT Insights for Istiod/Gateway deployment status check" (https://github.com/solo-io/gloo-mesh-enterprise/issues/12806)
- Fix deleting last object of a GVK in redis for relay snapshot updates. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13189)
- The gloo-mesh-ui flags `--platform-config-dir` and `--platform-config` flags have been removed as they are now no longer used.
- "Allows users to configure consecutive errors on Outlier Detection Policy to be 0. Previously, this would default the policy to 5. Now, if a user sets consecutive errors to 0, the envoy filter will be set to 0. If the user does not set consecutive errors, the envoy filter config will be set to 5." (https://github.com/solo-io/gloo-mesh-enterprise/issues/12609)
- Fix a regression when translating cross-workspace RouteTable imports.
- Dashboard charts now properly update when values change. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14785)
- Removed links to service page on cluster services card when dashboard doesn't display istio. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14663)
- UI Dashboard insights limit increased to prevent insights not being rendered. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13948)
- Dashboard now uses a separate limit for data plane insights. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14181)
- Includes a fix for the dashboard links loading states, and adds in the Hubble UI page link. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14883)
- On graph edge details hide "enforced by" if an edge is a ghost node (https://github.com/solo-io/gloo-mesh-enterprise/issues/14658)
- Opening the details modal no longer resets pagination on the insights page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14607)
- Adds several fixes for lighthouse and a11y best practices. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14250)
- Adds several fixes for lighthouse and a11y best practices. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14250)
- Adds a line-wrap toggle button to the log viewer. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14103)
- Adds the status column for policies back in to the UI resources page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14766)
- Fixed broken link to policy page on resources overview. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14564)
- Outlier policy details page now only shows `consecutive_errors` and
- Deep link to resource type removed except for access policy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13006)
- Resource page no longer shows empty namespaces on card view. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13435)
- Policy link on resources page now has correct link when resource doesn't have a workspace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13716)
- Right side date fixed on root cert dashboard. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14356)
- This updates the Jaeger search in the service details tracing tab to pre-select the search option if possible. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13905)
- Services page now includes a label search. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14102)
- Updates the service landing page to show service labels. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7063)
- Active sidebar item is now still clickable on details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14820)
- Fixes the case when the kubernetes and gateway sidebar items are both highlighted when navigating to either of their pages. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14234)
- Updates the logic to always show the sidebar observibility section, and hide subsections based on feature flags. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14397)
- Updates the register cluster modal links to point to the correct docs site. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14051)
Helm Changes
- Update the prometheus-community chart to 25.11.0, which updates Prometheus to v2.49.1 (https://github.com/solo-io/gloo-mesh-enterprise/issues/13360)
- Implement a Helm hook to re-deploy Prometheus automatically during the upgrade of the the prometheus-community chart from 19.7.2 to 25.11.0. The hook can be disabled by setting the `prometheus.skipAutoMigration` Helm value to `true`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14726)
- Upgrade redis to 7.2.4 (https://github.com/solo-io/gloo-mesh-enterprise/issues/14524)
- "Remove the helm and doc references to `legacyMetricsPipeline`, which was removed in v2.4." (https://github.com/solo-io/gloo-mesh-enterprise/issues/13590)
- Add the helm value `.glooUi.prometheusClientCertSecretName`. The name of the Secret containing the Prometheus
- The experimental sidecar-accel feature has been removed (https://github.com/solo-io/gloo-mesh-enterprise/issues/13841)
New Features
- Added support for a new graph layout using the DOT engine (https://github.com/solo-io/gloo-mesh-enterprise/issues/11386)
- mTLS information has been added to the graph and egress pages. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13071)
- Added a new option to `meshctl debug report` to dump the contents of the Redis database used by Gloo Mesh Enterprise. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13872)
- Ensure dashboard displays licensing error messages (https://github.com/solo-io/gloo-mesh-enterprise/issues/13720)
- Add support for controlling the output directory location for the archive
- Adds `consecutiveGatewayErrors` to the `OutlierDetection` policy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12611)
- Adds an AdaptiveRequestConcurrencyPolicy page to the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14280)
- Added day/time indicator and date range indicators to cert expiry dashboard card. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13177)
- Overlapping points on cert expiry dashboard card now combine into a single point. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13182)
- This adds links from the dashboard and cluster details cilium cards to the /logs page for cilium components. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13414)
- This simply enables server TLS on the UI to allow encrypted traffic from a fronting load balancer to the UI instance. The TLS certificate will be mounted as a volume directly on the UI and will be automatically rotated when the Kubernetes secret is rotated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10255)

v2.5.0 (v2.5.0)

Thu, 04 Jan 2024 20:03:34 GMT

v2.5.0-rc3 (v2.5.0)

Thu, 04 Jan 2024 20:03:34 GMT

Fixes
- Changing filters on the graph now aborts previous calls to make multiple changes smoother. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13491)
- Fixes an issue where a stitched `ApiDoc` would be unintentionally garbage collected in a single cluster setup. Also fixes an issue where the contents of the `PortalConfig` would not be updated when a `RouteTable` it selected was deleted. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13781)
- Fix regression introduced in 2.5.0-rc2 that affected import/export of GraphQL ApiDocs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13846)
- "Destination subsets that use the same label but have different values across Route Tables are now correctly set on DestinationRules." (https://github.com/solo-io/gloo-mesh-enterprise/issues/12065)
- Hides table tooltips when they are not needed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13616)
- Graph filters now clear all properly and namespaces work as expected with workspaces no selected. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13724)
New Features
- Graph filter dropdowns now prompt user to select something when empty. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13723)

v2.5.0-rc2 (v2.5.0)

Tue, 26 Dec 2023 21:39:53 GMT

Dependency Bumps
- golang.org/x/crypto has been upgraded to v0.17.0.
- solo.io/rate-limiter has been upgraded to v0.11.7.
- solo.io/ext-auth-service has been upgraded to v0.55.3.
- sigs.k8s.io/controller-runtime has been upgraded to v0.16.4-0.20231208143029-67d355d101a6.
- solo-io/ext-auth-service has been upgraded to v0.55.1.
- solo-io/rate-limiter has been upgraded to v0.11.5.
- solo-io/skv2 has been upgraded to v0.36.1.
- istio.io/istio has been upgraded to v1.20.1.
Fixes
- Fixes an issue where portal translated resources were in a endless creation/deletion loop. This occurred when the workspace of the portal object did not select the namespace and cluster where the `gloo-portal-server` lives in. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13158)
- Select All has been removed from the graph filter options for better UX. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13491)
- "Show total count of insights" (https://github.com/solo-io/gloo-mesh-enterprise/issues/13388)
- Certificate overview and modal "issued to" text updated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13613)
- Ingress page title and icon updated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13612)
- Removed dots on dashboard health cards. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13610)
- Dupe Gloo versions combined on dashboard health cards. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13622)
- Dashboard & Cluster Details Health sections fixed to never be blank. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13570)
- Slightly improves dashboard load speed by making api calls earlier. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13447)
- Debug page updated to have label filters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11247)
- Security Insights page rewritten to better match Insights page updates. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13564)
- Table links updated to have standard look / wording. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13615)
- ApiDocs do not need to be explicitly imported/exported anymore. Route tables can
- Usage plan information can now be computed correctly across workspaces. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13752)
- Put batch processors last in the list of processors in otel pipelines. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10883)
New Features
- New `meshctl` profile to enable Cilium pod logs (https://github.com/solo-io/gloo-mesh-enterprise/issues/13593)
- Add Cilium pods logs to Gloo Mesh UI (https://github.com/solo-io/gloo-mesh-enterprise/issues/13592)
- Change Severity dropdown on insights list page to pills with counts. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13389)

v2.5.0-rc1 (v2.5.0)

Tue, 12 Dec 2023 18:11:09 GMT

Dependency Bumps
- opentelemetry-collector/https://open-telemetry.github.io/opentelemetry-helm-charts has been upgraded to 0.74.0.
- jhump/protoreflect has been upgraded to v1.15.3.
- google.golang.org/grpc has been upgraded to v1.59.0.
- golang.org/x/net has been upgraded to v0.19.0.
- golang/golang has been upgraded to v1.21.5.
Fixes
- Ensure `EnvoyFilter` names remain consistent for configuration patches on the same route. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12167)
- Add `securityContext` to rate-limiter Redis and use correct `RunAsUser` value. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12302)
- Add resources, service account, and readiness probe to rate-limiter Redis. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11382)
- Fix memory leak when resources are deleted on mgmt cluster (https://github.com/solo-io/gloo-mesh-enterprise/issues/13256)
- Check custom mutating webhook created by ILM as part of data place health check (https://github.com/solo-io/gloo-mesh-enterprise/issues/13213)
- "Fix the list of egress traffic to only show external services that were actually accessed with a traffic value > 0." (https://github.com/solo-io/gloo-mesh-enterprise/issues/13397)
- "Fix Service List page in the UI to show correct total counts." (https://github.com/solo-io/gloo-mesh-enterprise/issues/13394)
- "Fix unknown version when agent is running as sidecar." (https://github.com/solo-io/gloo-mesh-enterprise/issues/13392)
- The empty state for Zero Trust card on dashboard is now more clear. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13065)
- Hide unsupported columns and tabs, along with a couple of text fixes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13504)
- "Hide gloo internal resources from list and count" (https://github.com/solo-io/gloo-mesh-enterprise/issues/13395)
- For accessing external services through an egress gateway, adds support for 1. arbitrary ports for TLS originated egress, 2. HTTP requests to the external service (no TLS origination), 3. multiple egress ports on a single ExternalService, 4. multiple egress hosts on a single ExternalService (https://github.com/solo-io/gloo-mesh-enterprise/issues/11429)
- Update log handler to remove CRI-O log format (https://github.com/solo-io/gloo-mesh-enterprise/issues/13383)
- 'istio-analyzer' now supports revisions of Istio control plane deployments. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12678)
- Temporarily disable certain Istio insights specific to Ambient until clarified upstream (https://github.com/solo-io/gloo-mesh-enterprise/issues/13077)
- Root certificate lines on dashboard/cluster details now shows a dot. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13387)
- Cluster details cert card now uses same logic as dashboard. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13188)
- Addressed feedback for cluster details. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13279)
- Updates the Cypress graph tests so that the tests against mock data are more consistent. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13257)
- Some doc links updated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13376)
- Updates the dashboard and cluster details health card links to the log viewer. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13415)
- Updates the dashboard and cluster details health card links to the insights page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13412)
Helm Changes
- "Override the otel service by setting the helm values `telemetryGateway.service.enabled` to false and `telemetryGatewayCustomization.compatibleService` and `telemetryCollectorCustomization.compatibleService` to true to support installations on kubernetes versions less than 1.26" (https://github.com/solo-io/gloo-mesh-enterprise/issues/12311)
- Setting `glooInsightsEngine.enabled=true` will enable the Gloo Mesh Core UI. By default, we will show the Gloo Platform UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13378)
- Setting `telemetryCollector.enabled=true` will enable the Graph page in the UI. Setting it to false will hide the Graph page in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13378)
- A Gloo Gateway license will enable the Portals and API Registry pages in the Gloo Platform UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13378)
- "Run glooAnalyzer as a sidecar for the glooAgent by default" (https://github.com/solo-io/gloo-mesh-enterprise/issues/13510)
- "Remove createGlobalWorkspace from the Gloo Mesh Core profiles" (https://github.com/solo-io/gloo-mesh-enterprise/issues/13509)
- "glooInsightsEngine.interval has been changed to glooInsightsEngine.gcInterval" (https://github.com/solo-io/gloo-mesh-enterprise/issues/12814)
- Rename `istioAnalyzer` to `glooAnalyzer` in helm. Use the `glooAnalyzer` and `glooInsightsEngine` helm values to configure the Insights Engine. (https://github.com/solo-io/gloo-mesh-enterprise/pull/13068)
- Expose configuration options for Gloo Insights Engine/Gloo Analyzer (https://github.com/solo-io/gloo-mesh-enterprise/issues/12814)
New Features
- Add finalizers to IstioLifecycleManager and GatewayLifecycleManager CRs to prevent deletion while reconciling. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12549)
- Add certificate modal to Ingress List page (https://github.com/solo-io/gloo-mesh-enterprise/issues/12673)
- The observation Graph in the UI now caches recent filtering (https://github.com/solo-io/gloo-mesh-enterprise/issues/13125)
- Introduce a new mechanism that will allow users to deny all traffic to gateway routes by default. This feature is useful for users that wish to have guarantees that no traffic will be allowed to a route until an authentication policy (e.g. JWT or external auth) has been successfully applied to the route. By default, this feature is disabled and requires users to enable the "GatewayDefaultDenyAllHTTPRequests" feature flag. Users that wish to onboard routes to this new mechanism can do so by labeling a RouteTable or individual HTTP routes with the "gateway.gloo.solo.io/require_auth" key and "true" value. This will block all traffic to the route until an authentication policy has been successfully applied to the route. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12181)
- Added tracing tab to service details. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12495)
- Service details page now displays graph data for that service. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11249)
- Enables the Cilium card on the dashboard. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12002)
- Hides unrelated sections of the dashboard and sidebar if only Cilium insights are returned (not Istio or Gloo). (https://github.com/solo-io/gloo-mesh-enterprise/issues/13229)

v2.5.0-beta3 (v2.5.0)

Fri, 01 Dec 2023 00:06:13 GMT

Dependency Bumps
- solo-io/rate-limiter has been upgraded to v0.10.1.
- solo-io/ext-auth-service has been upgraded to v0.53.1.
- solo-io/ext-auth-service has been upgraded to v0.53.0.
- kubernetes-sigs/gateway-api has been upgraded to v1.0.0.
- open-telemetry/opentelemetry-collector-contrib has been upgraded to v0.89.0.
- solo-io/licensing has been upgraded to v0.4.2.
Fixes
- Fixes an issue where multiple destinations in a single route was not handled correctly by portal. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13096)
- Fixes an issue where the redis config map and secret were always mounted even when redis was disabled for the portal chart. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12206)
- Updates the insights landing page to reflect feedback. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12833)
- Improve load times of the ListWorkspaceDestinations endpoint in the dashboard backend. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12466)
- When a child route table has no matchers defined, set the default value to empty to avoid adding a trailing slash to the translated Istio route. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12692)
- Do not add trailing slash when URI is not defined in the delegated child route table matcher. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12692)
- In the case of cross-workspace, delegated routes, insert the policies from the snapshot of the child route table into the snapshot of the parent route table. Only export policies, do not insert exported/imported objects into the merged snapshot to avoid cross-boundary issues. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12784)
- Cached workspaces now show the correct status in the ui. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12880)
- SOLO0006 will now detect when namespaces/pods previously labeled for sidecar injection are now labeled for ambient (https://github.com/solo-io/gloo-mesh-enterprise/issues/13037)
- Enable the Solo resources page for Gloo Core users (https://github.com/solo-io/gloo-mesh-enterprise/issues/13157)
- Fixes an issue where the stitched `ApiDoc` for portal would be continuously created/deleted in a single cluster setup. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13158)
- Fix agent registration/deregistration bug to correctly trigger insight engine run. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12890)
- "Fixes issue in Istio Analyzer where the analyzer would detect invalid default istio CA certs even when user presented certs exist." (https://github.com/solo-io/gloo-mesh-enterprise/issues/12901)
- "Fix fatal crash when HLT0008 hits a nil pointer error." (https://github.com/solo-io/gloo-mesh-enterprise/issues/13309)
- Fix Service List request and error counts for services that do not match deployment CR names directly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13050)
- Fix Istio VM package URLs that were updated recently. Each Istio major.minor version has a GCS bucket that is obfuscated with a SHA. (11061)
- Update SYS0003 Insight to use KubernetesCluster CRD to determine agents health status. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12829)
- Fix the insight for showing how many kubernetes external services are being accessed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11253)
- Fix the insight for showing how many kubernetes workloads are receiving mTLS mesh encrypted traffic. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12697)
- Fixed clusters page having two pagination controls. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13106)
- Updated the dashboard page empty state docs links. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12662)
- Gloo management plane status can now properly detect when it's in a bad state. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12728)
- Egress page now correctly lists entries, and can now be filtered by time window. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13107)
- FIPS on dashboard updated with multicluster support. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12926)
- Updates the order of the health card tabs, and refactors some of the cluster details page. Also updates the environment check deployment tooltips and improves CVE detection on the health card. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13143)
- Addresses some of the health card feedback. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13143)
- Stops the dashboard charts from re-animating after the initial load when data is fetched. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13201)
- Insight details text now rendered as markdown. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13321)
- Insights overview now properly shows all insights by default. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13167)
- Health card detail links removed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10450)
- Addressed various milestone 2 feedback. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12864)
- Updates the services page to be responsive and searchable. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13030)
Helm Changes
- Rename licensing.glooCoreLicenseKey to licensing.glooMeshCoreLicenseKey (https://github.com/solo-io/gloo-mesh-enterprise/issues/12509)
New Features
- A new page is available in the UI to explore the details of a Service. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11249)
- Add support for nested claims in JWT RBAC filter (see jwtpolicy.spec.config.claims.nestedClaimDelimiter for more information about usage). (https://github.com/solo-io/gloo-mesh-enterprise/issues/12211)
- Add a new value to Gloo Analyzer that will allow it to be deployed as a sidecar to agent If the agent is deployed as a sidecar in single cluster mode, the analyzer will be a sidecar to the management server (https://github.com/solo-io/gloo-mesh-enterprise/issues/12454)
- Introduces a new InsightConfig Resource, which adds configuration for disabling insights from showing up in the Gloo Core UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12866)
- UI now hides insights when `insights.enabled` is false. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12433)
- Add support for richer OPA API to OPA Auth Server, and OPA Auth (ConfigMap defined policies). (https://github.com/solo-io/gloo-mesh-enterprise/issues/12608)
- Introduce a new mechanism that will allow users to deny all traffic to gateway routes by default. This feature is useful for users that wish to have guarantees that no traffic will be allowed to a route until an authentication policy (e.g. JWT or external auth) has been successfully applied to the route. By default, this feature is disabled and requires users to enable the "DenyAll" feature flag. Users that wish to onboard routes to this new mechanism can do so by labeling a RouteTable or individual HTTP routes with the "gateway.gloo.solo.io/require_auth" key and "true" value. This will block all traffic to the route until an authentication policy has been successfully applied to the route. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12181)
- New deployment options for Insights Engine. Can be deployed standalone or sidecar of Gloo Mesh Mgmt Server pod. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12660)
- New insight to show Istiod high push times by looking at the Istiod metrics (https://github.com/solo-io/gloo-mesh-enterprise/issues/12476)
- Gloo Health now has it's own health section on dashboard / cluster details, and gloo info removed from Istio tab.
- Adds a page to view egress traffic to the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11009)
- Sidebar and site root updated to support platform licenses. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12810)
- "Added support for OIDC distributed claims in ExtAuthPolicy" (https://github.com/solo-io/gloo-mesh-enterprise/issues/11888)

v2.5.0-beta2 (v2.5.0)

Thu, 02 Nov 2023 22:17:32 GMT

Breaking Changes
- "Use `configYaml` rather than `config` in the hash for the `opa-config-version` value" (https://github.com/solo-io/gloo-mesh-enterprise/issues/11908)
Dependency Bumps
- solo-io/ext-auth-service has been upgraded to v0.51.0.
- solo-io/skv2 has been upgraded to v0.34.6.
Fixes
- Use allowlists for metric labels in default OTel pipeline (https://github.com/solo-io/gloo-mesh-enterprise/issues/10885)
- Fix service isolation while in Ambient mode by not treating the service associated with the Ambient waypoint as a service we need to restrict traffic to. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11750)
- Updates ambient multicluster to use TLS protocol in Istio gateway rather than HBONE. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12048)
- Enable TrimProxyConfigPolicy translation to continue despite service destination issues. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11836)
- Remove the GLOO_MESH_ENABLE_WORKSPACE_CACHE environment variable, turning on the workspace cache behavior by default. Reduce memory used by the gloo-mesh-ui pod with workspace caching. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11874)
- Allow the environment variable `K8S_MEM_LIMIT` to be set as part of the Gloo Platform UI deployment and apply to the apiserver. This makes the go runtime attempt to respect the limits set on the Kubernetes pod (see https://pkg.go.dev/runtime/debug#SetMemoryLimit). (https://github.com/solo-io/gloo-mesh-enterprise/issues/11874)
- The metrics graph now does a better job of placing nodes in Workspace mode when they are children of nodes from other workspaces. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11972)
- The 'External Services' toggled on the metrics graphs now include VM Workloads. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12189)
- OpenAPI spec api version portal outputs should use the version in the route table's portal metadata (https://github.com/solo-io/gloo-mesh-enterprise/issues/12331)
- Add RBAC for k8s gateway apis to agent (https://github.com/solo-io/gloo-mesh-enterprise/issues/12338)
- OpenAPI spec path item parameters and extension props were not being included in the stitched schema (https://github.com/solo-io/gloo-mesh-enterprise/issues/12358)
- Resolve backwards compatibility issue with ProxyProtocolPolicy in Istio < 1.17. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12421)
- skip upgrade validation should only apply to installations with defined revisions (https://github.com/solo-io/gloo-mesh-enterprise/issues/12465)
- Node container boxes on the graph now encompass all children, even when idle/ghost cohorts are not shown. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12533)
- Fix a memory leak when constructing the portal config object. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12594)
- Fixes a performance issue encountered when an ExternalService had a very high number of ports exposed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12722)
- Adds authority + subject key ids to cert insights for deduping, as well as support for multiple orgs and org units (https://github.com/solo-io/gloo-mesh-enterprise/issues/12213)
- Use network information in addition to workload_id to uniquely identify Graph nodes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12208)
- Cluster icon updated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11849)
- Feature gates: revert to using glooNetwork.enabled to toggle the gloo-network feature in the mgmt-server and perform case insensitive lookups for features in the mgmt-server. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12370)
- Helm values: initialize featureGates to not be null. This is required to be backward compatible with older Helm versions. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12370)
- Insights query should ignore controller_revision_hash (https://github.com/solo-io/gloo-mesh-enterprise/issues/11572)
- Fix otel configuration to designate gloo-telemetry-gateway as a gateway and gloo-telemetry-collector-agent as a collector for all metrics. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12035)
- Fixes helm install errors using new `namespacedRbac` value. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12164)
- Fix for agent going into CrashLoopBackoff state when running with minimal set of CRDs installed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12672)
- Update `gloo-telemetry-collector-agent` to not filter required internal metrics (https://github.com/solo-io/gloo-mesh-enterprise/issues/12676)
- Fix an issue when utilizing lambda functionality on clusters with Istio 1.19 deployed. Previously, this would produce invalid Envoy configuration that was rejected by istiod. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12093)
- Fix an issue where configuring ProxyProtocolPolicy resources on clusters with Istio 1.19 deployed. Previously, this would produce invalid Envoy configuration that was rejected by istiod. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11444)
- Fixes a gap in the portal translation logic that caused the portal to not be able to support stitching openAPI specifications that contained recursive schema definitions. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11671)
- Supports translation sharding for portal translation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12325)
- Fixes an issue where we were caching a pointer to an internal destination type during portal translation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11518)
- Addresses insights redis store filter by codes ANDing multiple instead of ORing them. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11469)
- Addresses improper processing of pagination cursor in insights redis store List func. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11469)
- Duplicate root certs no longer show up on dashboard. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12225)
- CRDs count removed from cluster details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12743)
- Updates the certificates list columns. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11810)
- GVK targets are now properly listed in insight modal. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11685)
- Updates the insights landing page columns to include target resource information. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12436)
- Insights modal updated to match mocks. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11685)
- Istio Environment list now displays CVE list on hover. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12478)
- Updates the empty state for the list services page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11427)
- Various dashboard feedback from milestone 1. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12174)
- Various dashboard feedback from milestone 1. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12174)
- Removes lint-staged, and runs esbuild on all files in the pre-commit hook, when UI files have changed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11279)
- Istio health severity now properly shows state of worst insight. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12674)
- Adds an empty state for the tracing landing page and updates the sidebar. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12238)
- Updates the traffic ingress page table and adds an expanded string list component. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11007)
Helm Changes
- Update image format for Istio Controller to conform with how we define other images in helm chart (https://github.com/solo-io/gloo-mesh-enterprise/issues/12432)
New Features
- Add more otelcol metrics to enable having alerts when we hit queue capacity and similar situations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9062)
- Supports regex rewrite for gloo portal routes. Regex rewrite is supported for prefix, exact and regex matchers. When using capture groups in the regex rewrite the regex expression should not contain any position anchors such as `^` or `$` as they will not work with gloo portal. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11681)
- Support L4 Policies in Multicluster in Ambient Mode. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11784)
- Promote EXPERIMENTAL_SEGMENT_ENVOY_FILTERS_BY_MATCHER to standard behavior. Now EnvoyFilters are created per matcher, rather than per gateway. This means that if you have 10 routes on a gateway, you will have 10 EnvoyFilters rather than 1. This should have no affect on routing, other than allowing for more routes to be created for a single gateway/workload. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11886)
- Add insight to check Gloo Core CRDs are installed (https://github.com/solo-io/gloo-mesh-enterprise/issues/12471)
- Nodes moved around in the graph can now be reverted to their original location by a button on the bottom of the graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12752)
- Display insight resolution steps in the UI (https://github.com/solo-io/gloo-mesh-enterprise/issues/12642)
- Add support for applying JWT policy to destinations to enable service to service authentication use cases. Now, users have the ability to configure JWT authentication policy for both ingress routes, and destinations within the mesh. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7962)
- New page added to view cluster details. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11851)
- SPIRE: enable conditional volumes and mounts for TLS between spire-server and the datastore, upgrade postgresql chart version, and expose additional datastore config values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11921)
- Support conditional CRDs installation of Enterprise CRDs for Gloo Platform CRD chart. By default enterprise CRDs are installed, but can be disabled by setting `installEnterpriseCrds` to `false` in the values.yaml file for the Gloo Platform CRD chart. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11419)
- Support conditional CRDs installation of Enterprise CRDs for Gloo Platform CRD chart. By default enterprise CRDs are installed, but can be disabled by setting `installEnterpriseCrds` to `false` in the values.yaml file for the Gloo Platform CRD chart. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11420)
- Support per cluster istio-controller lifecycle management instead of per mesh for running insights engine. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12657)
- External workloads: implement bug-report tool. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11921)
- Meshctl: promote external-workload command set and deprecate the legacy vm command set. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11921)
- External workloads: allow customizing iptables redirection rules for inclusion and exclusion of ports, IP ranges, and network interfaces. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12490)
- External workload: enable workloads to connect to a k8s cluster in a network different than the workload's VPC network. This can be enabled by specifying the '--network' field when onboarding the workload using meshctl. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11223)
- External workload: simplify the meshctl command used to generate a join token for workloads that make use of a one-time token for attestation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11921)
- External workload: implement status reporting. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11921)
- External workload: simplify join token configuration and usage by not requiring users to not specify the join token SPIFFE IDs in the ExternalWorkload spec. Attesting external workloads using a join token can be configured by setting 'joinToken.enable: true' in the ExternalWorkload's configuration. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11921)
- External workloads: combine gloo-spire-agent and gloo-otel-collector packages into a single gloo-workload-agent package. This simplifies the install UX. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11921)
- External workload: improve onboarding UX by fetching the associated WorkloadGroup from the admin API instead of requiring users to specify the ExternalWorkload config via stdin or a file. Additionally, adds a '--join-token' flag to the onboard command that should be set when using the token attestor. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11921)
- Enhance UX to toggle features and their associated CRDs. The featureGates Helm property exposes features as key-value pairs where the key corresponds to the feature name and the value is a boolean indicating whether the feature is enabled. Custom conditions based on property can be set in codegen to conditionally install CRDs corresponding to alpha/beta features. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12370)
- Feature gates: use consistent API and feature toggling semantics for feature gates. The experimental feature gates are deprecated in favor of using the new featureGates API in HELM. Corresponding environment variables and Helm enable conditions for associated features are autogenerated. This change additionally removes the AsyncStatusWrites toggle that is no longer used or necessary. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12370)
- Feature gates: add GlooNetwork as a feature gate and deprecate legacy flag. Additionally, update the references in Helm templates and tests. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12370)
- Adds new insight that reports when deployments have proxies that are out of sync (https://github.com/solo-io/gloo-mesh-enterprise/issues/12483)
- Adds base Gloo Core functionality with Insights Engine, populate the specific Insights needed by the UI Overview page and show Insights from Istioctl Analyze. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11472)
- Creates insights registry with summary and static docs content for resolution of insights to be used by Insights Details modal in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12283)
- add insight to check number istio crds matches expected (https://github.com/solo-io/gloo-mesh-enterprise/issues/12257)
- Adds 2 Gloo Core Insights for Istio Gateway and VirtualService resources sharing configuration across namespaces. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12467)
- Adds a certificate details modal to the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11811)
- Adds a new certificates list page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11810)
- Added cilium health details to dashboard. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12002)
- Empty state of dashboard added. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11986)
- Insights overview now supports code filtering (via text input) and deep linking. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12480)
- Insights page now shows code group for the "type" instead of the whole code + added group dropdown. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11686)
- Adds a page for viewing k8s Gateway API resources. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11356)
- Dashboard Certificates Expiry now supports multicluster root certificates. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12225)
- Services page now shows and can filter by labels. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11247)
- Service labels now show in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7063)
- Adds a traffic ingress page to list gateway resources. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11007)

v2.5.0-beta1 (v2.5.0)

Tue, 03 Oct 2023 03:18:01 GMT

Breaking Changes
- "Remove legacy metrics pipeline. `telemetryCollector.enabled` must be true for UI Graph data to populate." (https://github.com/solo-io/gloo-mesh-enterprise/issues/10548)
- "Remove legacy gloo-mesh-enterprise charts." (https://github.com/solo-io/gloo-mesh-enterprise/issues/10966)
- The default Gloo Agent health check port has been changed from 8090 to 8091. The default Gloo Agent stat port has been changed from 9091 to 9093. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9850)
- Remove common.addonNamespace default value from helm chart. By removing this default, the "addons" will now be installed in the namespace of the helm installation/release. If you are relying on the default value of `gloo-mesh-addons`, you will need to explicitly set it in your helm values file. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8798)
Dependency Bumps
- solo-io/skv2 has been upgraded to v0.34.4.
- solo-io/ext-auth-service has been upgraded to v0.48.0.
- solo-io/rate-limiter has been upgraded to v0.10.0.
- solo-io/ext-auth-service has been upgraded to v0.46.0.
- solo-io/licensing has been upgraded to v0.4.1.
- solo-io/skv2-enterprise has been upgraded to v0.31.8-gp.
- solo-io/external-apis has been upgraded to v0.2.22.
- solo-io/ext-auth-service has been upgraded to v0.47.1.
- solo-io/ext-auth-service has been upgraded to v0.48.0.
- solo-io/gloo-network-agent has been upgraded to v0.2.1.
- solo-io/licensing has been upgraded to v0.4.0.
- docker/distribution has been upgraded to v2.8.2.
- deislabs/oras has been upgraded to v0.11.1.
- moby / docker/moby / docker has been upgraded to v20.10.25.
- solo-io/gloo-network-agent has been upgraded to v0.2.1.
- k8s.io/api has been upgraded to v0.28.1.
- k8s.io/apimachinery has been upgraded to v0.28.1.
- k8s.io/client-go has been upgraded to v0.28.1.
- k8s.io/kubectl has been upgraded to v0.28.1.
- sigs.k8s.io/controller-runtime has been upgraded to v0.15.0.
- istio.io/istio has been upgraded to 1.18.2.
- solo.io/skv2 has been upgraded to 0.34.0.
- golang/golang has been upgraded to v1.21.1.
Fixes
- 'Ambient workloads are now handled properly in the UI Graph. Also, workspaces and clusters sharing names is now okay.' (https://github.com/solo-io/gloo-mesh-enterprise/issues/10014)
- Add experimental flag to filter out the secrets which get added into the cache for reading/listing. These selectors follow the [kubernetes field selectors syntax](https://kubernetes.io/docs/concepts/overview/working-with-objects/field-selectors/). To enable this setting set the following environment variable on the gloo-mesh-enterprise pod: - name: EXPERIMENTAL_SECRET_FIELD_SELECTOR
- Use the certificate with the highest ttl when multiple certificates are present. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10161)
- When selecting RouteTable's to expose in the portal, selecting RouteTable's across different namespaces would cause the portal config to be overwritten. This resulted in only the last translated RouteTable being exposed in the portal. This has been fixed by ensuring that the portal config is not overwritten when selecting RouteTable's across different namespaces. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10240)
- Fix bug in cross cluster routing when using the same subset in multiple routes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10358)
- The VirtualGateway details page in the UI shows only RouteTables that are actually attached to particular listeners. Listeners that use named port selectors now display the port name. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10742)
- Fixes an issue where all agent replicas would attempt to discover openAPI specs and upsert apidocs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10908)
- Downgrade the warning message from a Dpanic to a WARN when redis sync falls behind and needs to do a readAll. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10919)
- Zero out managed fields to reduce snapshot size (https://github.com/solo-io/gloo-mesh-enterprise/issues/10962)
- Addressed issue that prevented the gRPC server in the Gloo Platform agent from starting correctly and caused the logs to be spammed with `grpc server: waiting for all components to register...` info messages. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11182)
- Improve memory usage by avoiding unnneccesary allocs when comparing object refs for RouteTable to VirtualGateway relationships (https://github.com/solo-io/gloo-mesh-enterprise/issues/11308)
- Configure mgmt server and agent readinessProbe port (https://github.com/solo-io/gloo-mesh-enterprise/issues/11314)
- Handle readiness check when multiple agents are running (https://github.com/solo-io/gloo-mesh-enterprise/issues/11302)
- Fix JWT per-policy provider name. Currently it's using the route-name, but this was causing very high numbers of providers, and therefore very large amounts of requests to the JWKS backend. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11368)
- Fix agent not receiving updates from k8s services until pod restart (https://github.com/solo-io/gloo-mesh-enterprise/issues/11370)
- Fixed the portal server /apis endpoint returning null instead of an empty array when no apis are present. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11387)
- Remove the generationchanged predicate from the generic cache reconciler to allow status updates to flow as the UI expects. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11421)
- Change host generation by address or CIDR to replace colons with hyphens so IPv6 addresses generate valid hosts (https://github.com/solo-io/gloo-mesh-enterprise/issues/11593)
- Make sure waypoints cannot be selected for RouteTable destinations (https://github.com/solo-io/gloo-mesh-enterprise/issues/11752)
- Fixes a problem where audience claim is expected to be client_id on OAuth2 access tokens in ExtAuth OIDC Authorization Code plugin (https://github.com/solo-io/gloo-mesh-enterprise/issues/11929)
- Propagate clusterDomain from KubernetesCluster to IstioOperator values when using IstioLifecycleManager. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6478)
- The UI no longer shows duplicate entries on its list of APIs or its list of RouteTables on policy pages. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7304)
- Populate Status for the GraphQLAllowedQueryPolicy and GraphQLPersistedQueryCachePolicy resources. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7606)
- Fixed bugs in the portal server pertaining to api key creation for a plan with multiple extauth policies and the /usage-plans endpoint not returning all ext auth policies for the same plan. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11309)
- Ensure that global translator only translates resources in connected clusters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8307)
- The Rate Limit Policy details page will display an error if the policy references an invalid RateLimitServerConfig. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8453)
- The node and edge details available in the graph now have a cleaner data presentation (https://github.com/solo-io/gloo-mesh-enterprise/issues/9051)
- On the graph, container boxes with only hidden nodes now hide themselves properly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9584)
- On the graph, boxes which don't themselves have real information will no longer display. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9584)
- "Allow disabling both the telemetry collector and the legacy metrics pipeline by setting `telemetryCollector.enabled: false` and `legacyMetricsPipeline.enabled: false` in the Helm values" (https://github.com/solo-io/gloo-mesh-enterprise/issues/9859)
- Fix an issue where invalid PeerAuthentication resources would be created when applying service isolation to a workspace. This was caused by a bug in the translation logic when processing Kubernetes Services that don't contain selectors. Now, these invalid resources will not be created. Users should configure an explicit AccessPolicy that selects this type of Service instead. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8833)
- Fix an issue where invalid PeerAuthentication resources would be created when an AccessPolicy applyToDestinations selector will select a Kubernetes Service that doesn't contain any labels. This was caused by a bug in the translation logic that did not properly account this use case. Now, a warning on the AccessPolicy resource will be shown when this occurs, and the invalid PeerAuthentication resource will not be created. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8833)
- Fix an issue with applying policy to delegated HTTP routes when the delegated RouteTable lives in a different cluster than the policy destination target. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9879)
- Fixes bug in `JWTPolicy` where `claimsToHeaders` was not always respected when `allowMissingOrFailed` was set to `true`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10588)
- "Outlier detection policy applied to an external service has an effect now." (https://github.com/solo-io/gloo-mesh-enterprise/issues/6119)
- Add label selector option `EXPERIMENTAL_WATCH_NAMESPACE_SELECTOR` to experimental features to filter triggers for mgmt server. The env value is used to limit the namespaces that will be considered for discovery in the cluster where the server is running. The value of the env is a label selector expression in the same form as the k8s set based requirements: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#set-based-requirement. The current limitation with this feature is that the selectors will be statically evaluated only once during startup so any relevant updates to the selectors or namespaces will still require the mgmt server to restart to update the filtered namespaces. This pr also fixes sort in the discovered mesh to avoid triggering extraneous reconciles. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10325)
- "a meta.NoKindMatchError is returned from List() calls when only a subset of CRDs is missing from the group (and not the whole group). Our IsNotFoundError helper now catches these errors too." (https://github.com/solo-io/gloo-mesh-enterprise/issues/11662)
- Fixes an issue where access to usage plans are not checked if the visibility of the developer portal is set to public. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10403)
- Fix unexpected available route to import in the Workspace Details UI page (https://github.com/solo-io/gloo-mesh-enterprise/issues/11944)
- Use float instead of uint32 in metrics.proto to fix the Graph UI bug where we were throwing away a lot of data values in between 0 and 1. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7985)
- Modify some UI computations to show the correct requests / second and latency values, by using averages instead of sums. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7985)
- Modify the Graph UI to use backend-computed display name everywhere. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7985)
- Do not recall base64 encode on identity token, was causing it to grow indefinitely. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10818)
- Allow deployment of multiple gateways with GLM without revisions. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11455)
- Keep ingress/egress gateways if ambient profile is selected. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11534)
- Remove global network configuration if ambient profile is selected. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11488)
- Respect helm namespace argument in order to allow gloo-platform to be installed in user-defined namespace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10532)
- Use OTEL for collecting gloo component metrics. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10684)
- Update prometheus config in codegen to disable pushgateway component. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11555)
- Fix an issue when JWTPolicy resources configure the "claims" or "requiredScopes" fields when service isolation has been enabled for a workspace. Previously, the management plane would translate conflicting Istio resources, which would break any gateway routes with JWT policy applied to them. Now, users can configure JWT authorization policies when service isolation is enabled for a workspace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11464)
- Adds the option for also getting the schema in the list APIs response on the portal REST server. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10699)
- Remove deprecated Access Logging service in the gloo-mesh-mgmt-server. Access Logging is now done through the oTel pipeline. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8903)
- Remove envoyAccessLogService and envoyMetricsService from ILM translation (https://github.com/solo-io/gloo-mesh-enterprise/issues/9722)
- "fix for ui tracing page's sidebar nav showing when tracing base path is empty" (https://github.com/solo-io/gloo-mesh-enterprise/issues/10430)
- Fix an issue with applying service isolation to a workspace in large scale environments. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11508)
- Fix an issue with service isolation translation non-deterministic NetworkPolicy resources when the Gloo Network feature flag has been enabled. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12009)
- Disables 'telemetryCollectorCustomization.enableCloudMetadataProcessing' by default since cloud metadata processing is non-optimal due to API calls to scrape metadata are not being cached. This results in a large number of API calls, thereby easily exhausting API request quota limits. This flag was newly introduced in 2.4.0, so it is safe to disable it and consider it experimental till the metadata scraping is optimized to cache responses and not make unnecessary API calls for every log message ingested by the telemetry processor. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11971)
- Added missing fields on access policy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10970)
- Dashboard insight links added, fips link made a temp doc link,
- Debug page filters now split into 4 different categories. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10538)
- Fips agent version no longer causes UI to show a version mismatch. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10045)
- Fixes error when fetching Virtual Gateway. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11284)
- Category labels for insights chart are now fixed values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11686)
- License Dropdown text updated for core license. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11619)
- Updates what is shown on the new dashboard UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12046)
- Adding support for TCP and TLS routes in UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8523)
- UI now informers users when they have no valid licenses. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10805)
- Fixed a broken link on OpenAPI destinations table. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9880)
- This updates the ui pre-commit hook to only run when the ui code is changed. The pre-commit hook also runs a tsc check now. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11279)
- GraphQL addon license checks removed in favor of using existing gateway license. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10864)
- Security Insights overview page icon updated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11796)
- Insights overview page icon updated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11795)
- Services overview page icon updated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11661)
- Workspace creation wizard replaced with old modal until feedback addressed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11624)
- Broken links with undefined workspace fixed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10696)
- Workspace lists no longer capitalize first letter. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8461)
- Improve UX around empty or pending statuses in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10531)
Helm Changes
- "update the prometheus-community chart to 19.7.2, which updates prometheus to v2.41.0" (https://github.com/solo-io/gloo-mesh-enterprise/issues/10401)
- "Introduces 'namespacedRbac' helm field on glooMgmtServer, glooUi, glooAgent, and extAuthService.extAuth to allow configuration of namespace-scoped RBAC policies (i.e. Role / RoleBinding), and namespace-scoped manager cache and controllers. Currently, secrets are the only resource that can be namespaced. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10521)
- "Remove legacy metrics pipeline. `telemetryCollector.enabled` must be true for UI Graph data to populate." (https://github.com/solo-io/gloo-mesh-enterprise/issues/10548)
- Add ipVersion parameter to glooUi helm chart, allowing control over IPV4, IPV6 or dual stack operation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10893)
- Add Gloo Core license key to the helm chart. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11422)
- Add controlPlaneRevision to helm template for gateway installation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9841)
- "Allow disabling both the telemetry collector and the legacy metrics pipeline by setting `telemetryCollector.enabled: false` and `legacyMetricsPipeline.enabled: false` in the Helm values" (https://github.com/solo-io/gloo-mesh-enterprise/issues/9859)
- "Add or enable readiness probes in mgmt-server, agent, and gloo-mesh-redis" (https://github.com/solo-io/gloo-mesh-enterprise/issues/10347)
- Updated the portal helm chart to use the `addonNamespace` value from the common helm values if it is provided. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10786)
- Add a `glooUi.basePath` helm value for the base path that the UI expects to be rendered on. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10927)
- Use a `lookup` command to look for existing Gloo UI OIDC secrets in the cluster. As a result, commands like `helm generate` will no longer work with the ui-auth.yaml template. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11125)
- Disable extra components from prometheus subchart (https://github.com/solo-io/gloo-mesh-enterprise/issues/11954)
- "removes unused demo.tracingEnabled value from helm api" (https://github.com/solo-io/gloo-mesh-enterprise/issues/10430)
New Features
- Upgrade ext-auth-service to allow OIDC Authorization code plugin to map claims to headers. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10589)
- Allow Graph Page to filter by cluster and namespace only (https://github.com/solo-io/gloo-mesh-enterprise/issues/10623)
- Add the ability to run the gloo-mesh components with missing CRDs. Specifically Gloo Mesh ones. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11420)
- Upgrade ext-auth-service to allow OpaServerAuth in ExtAuthPolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11601)
- The primary UI graph now provides the Platform environment information. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11802)
- Tooltips in the graph will now properly display information on a node's subnet, platform, and vpc. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11802)
- Updated `meshctl debug report` to include license violation information. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6045)
- Adds details pages for GraphQLAllowedQueryPolicy and GraphQLPersistedQueryCachePolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6265)
- Add a new value to gloo platform helm chart to allow users to specify glooAgent to run as a sidecar of glooMgmtServer. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9850)
- "Add pipelines for deploying just the telemetry collector without the gateway in a single cluster." (https://github.com/solo-io/gloo-mesh-enterprise/issues/9922)
- Adds support for more complex configurations in a single `AccessPolicy`, for example allowing GET requests from one client and POST requests from another. The `authz` field is deprecated, replaced with a new `authzList` field which supports multiple side-by-side entries, each with the structure and behavior of the deprecated field. Previously, multiple `AccessPolicies` applied to the same workload were required to achieve this behavior. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7579)
- Dynamically update selected namespaces list that the `EXPERIMENTAL_WATCH_NAMESPACE_SELECTOR` env selects with k8s set based requirements. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10325)
- Add meshctl redis options for switching active cluster in HA mode. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10309)
- "Allow passing `enabledExperimentalApi` flag to helm when installing crds" (https://github.com/solo-io/gloo-mesh-enterprise/issues/9019)
- External workload: allow users to configure spire-agent and gloo-otel-collector environment variables as a part of the onboarding process. Since these processes run as systemd services, it can be cumbersome to pass necessary environment variables due to file permissions and ownership. This allows users to configure SPIRE agent with a join token and the OTel agent with Azure API credentials, if necessary, using environment variables. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11202)
- "External workloads: azure platform integration for install and SPIRE." (https://github.com/solo-io/gloo-mesh-enterprise/issues/11202)
- Enables external workload integration by default. Users do not need to explicitly enable this feature to integrate external workloads into the mesh. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11921)
- "External workload: allow routing to the workload using its configured external IP." (https://github.com/solo-io/gloo-mesh-enterprise/issues/11772)
- Improved install and mesh enrollment experience for agent-based external workloads. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10496)
- External workloads: enable using ZTunnel as the proxy agent instead of Envoy when the istio-ambient package is installed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11205)
- Fix extraneous redis warnings printed for meshctl commands (https://github.com/solo-io/gloo-mesh-enterprise/issues/10309)
- Adds support for `ALLOW_MISSING` configuration in `JWTPolicy`, where any provided JWT token will be validated while requests with no JWT token will also be permitted. The `allowMissingOrFailed` boolean field is deprecated, replaced with a new `validationPolicy` enum providing both `ALLOW_MISSING` and `ALLOW_MISSING_OR_FAILED` alternatives, in addition to the default `REQUIRE_VALID`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10073)
- Add new reconciler to control lifecycle of new Istio controller and e2e tests. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10673)
- "Allow disabling the default Istio retry policy when the retry attempts is explicitly set to 0. If the retry attemps is unset, a default of 2 retry attempts will be configured as before." (https://github.com/solo-io/gloo-mesh-enterprise/issues/11817)
- New page added to view clusters overview. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10957)
- UI updated to check for core license and show status of license in license dropdown. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11052)
- Sidebar updated to match mocks. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10443)
- Added Gloo Management Plane row to dashboard Istio Health Check. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11070)
- Added Lifecycle Management row to dashboard Istio Health Check. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11077)
- Added Istio Control Plane row to dashboard Istio Health Check. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11072)
- Added Gloo Agent row to dashboard Istio Health Check. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11499)
- Added Istio Data Plane row to dashboard Istio Health Check. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11078)
- Istio Environment Check Dashboard section now detects CVEs for listed versions. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11076)
- Created Dashboard FIPS card. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11252)
- UI now supports helm override for disabling graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10972)
- Graph filters now better supports not having workspaces. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11112)
- Insights overview page added into UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10956)
- Istio Enviroment section added to UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11075)
- Updated left nav to match new design. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10443)
- Added and hooked up Listener Connection policy details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9465)
- Load balancer details page updated to display new fields. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9143)
- Adds a UI component for viewing log data. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10449)
- Debug page removed and replaced with resource pages. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11028)
- Security Insights overview page added into UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11725)
- Page and apiserver added for Services list page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10959)
- Added time window selection to Services page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11506)
- Inisghts overview page's cluster filter changed to a dropdown. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11877)
- Sidebar updated with new icons. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10443)
- Added overview card for Zero Trust. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11482)

v2.4.17 (v2.4.0)

Fri, 28 Feb 2025 14:24:24 GMT

v2.4.16 (v2.4.0)

Fri, 26 Jul 2024 14:21:01 GMT

Dependency Bumps
- openpolicyagent/opa has been upgraded to v0.64.1.
- golang.org/x/net has been upgraded to v0.23.0.
- golang.org/x/crypto has been upgraded to v0.21.0.
- golang.org/x/sys has been upgraded to v0.18.0.
- golang.org/x/term has been upgraded to v0.18.0.
Fixes
- The dashboard UI will now display a banner indicating when a management server replica is in safe mode.
- In the dashboard UI, the access policy details page now shows all selected service accounts. The policy details page no longer shows duplicate destinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12266)
- Policies that are ignored or cause errors for routes with redirect or direct response actions
- The timeline graphs in the UI now have smoother transitions on data change. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15921)
- AuthorizationPolicies should not be regenerated unnecessarily when selectors share the same values across different properties. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15976)
- Change the behavior of AuthzPolicy creation when using ServiceIsolation. Previously,
- Fix an issue where the `gloo_mesh_safe_mode_active` metric did not reset when a KubernetesCluster CR was deleted. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16337)
- In the dashboard UI, the workspace of listener route tables attached to virtual gateways will now be properly displayed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17093)
- "Fix an issue where a TLS RouteTable route configuring duplicate, weighted forwardTo destinations results in an Istio VirtualService with duplicate matchers, which Istio will ignore.
- Ensure delegated RouteTables with the same weight on the same route are sorted by creationTimestamp. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17266)
- Sort endpoints based on their attributes to prevent unintentional reordering between version caused by the implementation of go maps. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17269)
- Fixed an issue where the agent FIPS images were not being built correctly.
- The ExtAuthPolicy details page in the dashboard UI now displays HMAC and OPA Server configurations correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17776)
- "pkg/env: fix extraneous logging of environment variables so that this is not logged just because a package is imported, e.g by meshctl." (https://github.com/solo-io/gloo-mesh-enterprise/issues/16066)
- Allows for the conditional installation of RateLimitConfig CRD.
- "Add a warning note in the ExternalService's host field about the implications of having a wildcard with no endpoints." (https://github.com/solo-io/gloo-mesh-enterprise/issues/16123)
- Fix potential race condition in `controller-runtime` package by explicitly setting logger. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16419)
- "prevent agent from receiving stale translated outputs" (https://github.com/solo-io/gloo-mesh-enterprise/issues/16788)
- "fix for ILM reconciler not pushing updates to agents" (https://github.com/solo-io/gloo-mesh-enterprise/issues/17721)
- The global workspace settings status is now correctly displayed in the workspace settings view. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16103)
- "When translating RouteTable direct response routes, in addition to creating an EnvoyFilter, also configure a direct response on the Istio VirtualService." (https://github.com/solo-io/gloo-mesh-enterprise/issues/16780)
- Fix nil pointer dereference if no gateway components are defined (https://github.com/solo-io/gloo-mesh-enterprise/issues/14880)
- Fix gloo platform helm template to properly specify multiple clusters for ILM (https://github.com/solo-io/gloo-mesh-enterprise/issues/11048)
- Adjust logging to no longer warn that ILM resources are not in a workspace (https://github.com/solo-io/gloo-mesh-enterprise/issues/14546)
- `invertMatch` now supports header merging semantics between child and parent route tables, similar to existing header merging semantics. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17366)
- Fix shared-data race condition that could result in statuses being inconsistent or flickering between values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16200)
- Tries to show more information about the GraphQL API on its details page, even if there is a failed status (e.g. fails to find all the GraphQLResolverMap's destinations). (https://github.com/solo-io/gloo-mesh-enterprise/issues/16288)
- "Fix the Dashboard CR translator so that the Gloo UI throws a useful error when it has an empty redis host."
- Some broken documentation links fixed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16239)
- Fixed broken documentation link on topbar dropdown. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16233)
- Timeline chart on graph nodes now properly renders when both an ingoing and
- Component layering updated for graph to avoid dropdown cutoff issues. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16626)
- Adds functionality to view the SDL for stitched GraphQL APIs subschemas to the GraphQL details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7872)
- Adds better error handling to the GraphQL Details page if there are schema parsing errors. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16353)
Helm Changes
- Add `extraExtensions` to otel collector and gateway to configure otel extensions. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16137)

v2.4.15 (v2.4.0)

Thu, 11 Apr 2024 19:17:01 GMT

Dependency Bumps
- solo.io/ext-auth-service has been upgraded to v0.51.8.
- solo.io/rate-limiter has been upgraded to v0.10.6.
Fixes
- Rebuild the workspace cache whenever the labels on a workspace-defining resource are updated. This will fix some bugs related to workspace definitions and import / exports not being updated when Workspace or Namespace labels are updated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15465)
- Fix deterministic order of translation when multiple revisions of Istio control plane present. Adds IGNORE_REVISIONS_FOR_VIRTUAL_DESTINATION_TRANSLATION env to check if gateways belong to same mesh as backing service of VirtualDestination. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15421)
Helm Changes
- "Allow users to configure the Dashboard CR spec.authn.oidc field via helm's `glooUi.auth.oidc` field." (https://github.com/solo-io/gloo-mesh-enterprise/issues/11620)
- Added helm value to configure redis io-threads configuration parameter (https://github.com/solo-io/gloo-mesh-enterprise/issues/15751)

v2.4.14 (v2.4.0)

Fri, 29 Mar 2024 20:19:00 GMT

Fixes
- Node container boxes on the graph now encompass all children, even when idle/ghost cohorts are not shown. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15861)
- The dashboard UI should no longer crash when a user requests a GraphQL route that doesn't exist. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15893)
- Emit Safe Mode (gloo_mesh_safe_mode_active) metric for each mgmt-server replica. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15864)

v2.4.13 (v2.4.0)

Fri, 22 Mar 2024 14:06:44 GMT

Fixes
- Remove false error log "internal error: no client supplied but snapshot present for local cluster". (https://github.com/solo-io/gloo-mesh-enterprise/issues/12951)
- Enable support for OpenTelemetry trace generation support during ext-auth-service Authorization checks. Traces
- Ensure api_id telemetry collector does not generate an error when the api_id attribute is nil. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14748)
- Fix issue where invalid openapi spec causes bloating in RouteTable status. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15534)
- "Make leader election timeouts configurable so that lease renewals can adapt to environments where larger timeouts may be necessary, for e.g., in environments where Kube apiserver is experiencing degraded performance due to a high load." (https://github.com/solo-io/gloo-mesh-enterprise/issues/5637)
Helm Changes
- "In the gloo-platform chart, add helm value `glooUi.auth.requestTimeout` with a default of 2 seconds to allow users to configure the timeout for external auth requests." (https://github.com/solo-io/gloo-mesh-enterprise/issues/11835)
- "In the gloo-mesh-enterprise chart, add helm value `glooMeshUi.auth.requestTimeout` with a default of 2 seconds to allow users to configure the timeout for external auth requests." (https://github.com/solo-io/gloo-mesh-enterprise/issues/11835)
- "Change the default timeout for Gloo UI external auth requests from 0.5s to 2s." (https://github.com/solo-io/gloo-mesh-enterprise/issues/11835)

v2.4.12 (v2.4.0)

Wed, 13 Mar 2024 00:21:17 GMT

v2.4.12-rc1 (v2.4.0)

Tue, 12 Mar 2024 01:34:19 GMT

v2.4.11 (v2.4.0)

Thu, 29 Feb 2024 19:34:00 GMT

Dependency Bumps
- solo.io/rate-limiter has been upgraded to v0.10.5.
- solo.io/ext-auth-service has been upgraded to v0.51.5.
- docker.io/redis has been upgraded to 7.2.4-alpine.
Fixes
- In the dashboard on the Workspace overview card, rename "Imported by workspaces" to "Imported Resources". (https://github.com/solo-io/gloo-mesh-enterprise/issues/13040)
- Fix translation bug in the RouteTable translator where translated Istio resources (VirtualServices and EnvoyFilters) could exceed the Kubernetes 253 max character limit for Meta.Name values. The end result was Gloo failed to persist these translated resources to the desired clusters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13214)
- Change the "gateway" counts in the UI dashboard to count the number of VirtualGateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14510)
- Reconcile Portal ApiDocs on ReplicaSet changes triggered by restarting or removing Deployments (https://github.com/solo-io/gloo-mesh-enterprise/issues/14698)
- Update the prometheus-server-migration job image to be pulled from the quay.io/solo-io/kubectl repository. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14938)
- Do not abort prometheus-server-migration job run if Prometheus deployment does not exist. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15038)
- Addressed an issue that prevented `VirtualDestinations` with different `clientModes` (e.g. one with the default TLS passthrough mode and one with the TLS termination one) from being correctly served by the same east-west gateway. This would most notably impact environments where a gateway need to route traffic cross-cluster to services that may or not be part of the mesh. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15075)
- Fix issue where the dashboard UI could crash when navigating the Workspace Details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15232)
Helm Changes
- Allow users to override the image used in prometheus-server-migration job by setting the helm values `prometheus-server-migration.image`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14938)
- Add the helm value `.glooUi.prometheusClientCertSecretName`. The name of the Secret containing the Prometheus

v2.4.10 (v2.4.0)

Fri, 09 Feb 2024 18:51:36 GMT

Dependency Bumps
- solo-io/licensing has been upgraded to v0.5.3.
- solo.io/rate-limiter has been upgraded to v0.10.4.
Fixes
- Eliminated duplicate logging of translation errors, reduced logging errors in each tctx to post-translation, improved error messages for Services that are misconfigured. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10421)
- Unnamed RouteTable routes would previously be given default names which would not be guaranteed to remain consistent across RouteTable updates. The method for creating default route names now results in consistent names across RouteTable updates if the route itself is not updated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12143)
- Improve UI query time and resource usage when loading API server pages. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13048)
- Prometheus-community chart has been updated to 25.11.0. If you are upgrading from Gloo Mesh <= 2.4.9 or <= 2.3.22, the prometheus-server deployment in the gloo-mesh namespace will be automatically deleted before the upgrade of the management plane. You can use the `prometheus.skipAutoMigration: true` Helm value to disable it and handle the migration manually. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13360)
- Fixes an issue where `ApiDoc` CRs generated by using a `ApiSchemaDiscovery` CR or through automatic discovery using service annotations would not be regenerated upon deletion of the `ApiDoc`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13743)
- Reduce memory spiking in Redis by using ensuring tmp keys are only created when necessary. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14688)
- Fixed an issue where the `trimAllProxyConfig` option on the global `WorkspaceSettings` was not being inherited by non-global `WorkspaceSettings`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9424)
- Fix deleting last object of a GVK in redis for relay snapshot updates. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13189)
- On graph edge details hide "enforced by" if an edge is a ghost node (https://github.com/solo-io/gloo-mesh-enterprise/issues/14658)
Helm Changes
- Update the prometheus-community chart to 25.11.0, which updates Prometheus to v2.49.1 (https://github.com/solo-io/gloo-mesh-enterprise/issues/13360)
- Implement a Helm hook to re-deploy Prometheus automatically during the upgrade of the the prometheus-community chart from 19.7.2 to 25.11.0. The hook can be disabled by setting the `prometheus.skipAutoMigration` Helm value to `true`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14726)
- Upgrade redis to 7.2.4 (https://github.com/solo-io/gloo-mesh-enterprise/issues/14524)

v2.4.9 (v2.4.0)

Sat, 27 Jan 2024 17:05:59 GMT

Dependency Bumps
- solo-io/licensing has been upgraded to v0.5.0.
- solo-io/licensing has been upgraded to v0.5.2.
Fixes
- Ensure mgmt-server crashes on startup with invalid/missing licenses. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14113)
- Ensure mgmt-server ignores invalid/deleted license updates at runtime. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14163)
- A new `license check` command has been added to meshctl to validate licenses before applying them to your cluster.
- Sort resources on the Workspace Details page in the dashboard consistently. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14378)
- Ensure dashboard displays licensing error messages (https://github.com/solo-io/gloo-mesh-enterprise/issues/13720)
- Deep link to resource type removed except for access policy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13006)

v2.4.8 (v2.4.0)

Wed, 10 Jan 2024 21:24:48 GMT

Fixes
- Changing filters on the graph now aborts previous calls to make multiple changes smoother. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13491)
- Select All has been removed from the graph filter options for better UX. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13491)
- Ensures that the relay push_client properly warms every time. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13502)
- "Destination subsets that use the same label but have different values across Route Tables are now correctly set on DestinationRules." (https://github.com/solo-io/gloo-mesh-enterprise/issues/12065)
Helm Changes
- The experimental sidecar-accel feature has been removed (https://github.com/solo-io/gloo-mesh-enterprise/issues/13841)

v2.4.7 (v2.4.0)

Tue, 26 Dec 2023 18:50:01 GMT

Dependency Bumps
- jhump/protoreflect has been upgraded to v1.15.3.
- google.golang.org/grpc has been upgraded to v1.59.0.
- golang.org/x/net has been upgraded to v0.19.0.
- docker/docker has been upgraded to v23.0.3.
- golang/golang has been upgraded to v1.21.5.
- golang.org/x/crypto has been upgraded to v0.17.0.
- solo.io/rate-limiter has been upgraded to v0.10.3.
- solo.io/ext-auth-service has been upgraded to v0.51.4.
Fixes
- Fixes an issue where portal translated resources were in a endless creation/deletion loop. This occurred when the workspace of the portal object did not select the namespace and cluster where the `gloo-portal-server` lives in. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13158)
- Fix memory leak when resources are deleted on mgmt cluster (https://github.com/solo-io/gloo-mesh-enterprise/issues/13256)
- For accessing external services through an egress gateway, adds support for 1. arbitrary ports for TLS originated egress, 2. HTTP requests to the external service (no TLS origination), 3. multiple egress ports on a single ExternalService, 4. multiple egress hosts on a single ExternalService (https://github.com/solo-io/gloo-mesh-enterprise/issues/11429)
- Debug page updated to have label filters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11247)
- Incorrect link removed from graph node details. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13105)
Helm Changes
- "update the prometheus-community chart to 19.7.2, which updates prometheus to v2.41.0" (https://github.com/solo-io/gloo-mesh-enterprise/issues/10401)

v2.4.6 (v2.4.0)

Fri, 01 Dec 2023 17:35:15 GMT

Dependency Bumps
- solo-io/rate-limiter has been upgraded to v0.10.1.
- opentelemetry-collector/https://open-telemetry.github.io/opentelemetry-helm-charts has been upgraded to 0.74.0.
Fixes
- Add `securityContext` to rate-limiter Redis and use correct `RunAsUser` value. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12302)
- Add resources, service account, and readiness probe to rate-limiter Redis. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11382)
- Improve load times of the ListWorkspaceDestinations endpoint in the dashboard backend. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12466)
- When a child route table has no matchers defined, set the default value to empty to avoid adding a trailing slash to the translated Istio route. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12692)
- Only request workspace details when a workspace card is expanded on the overview page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12994)
- "Fixes panic when using claimsToHeaders in ExtAuthPolicy" (https://github.com/solo-io/gloo-mesh-enterprise/issues/13148)
- Fix Istio VM package URLs that were updated recently. Each Istio major.minor version has a GCS bucket that is obfuscated with a SHA. (11061)
Helm Changes
- "Override the otel service by setting the helm values `telemetryGateway.service.enabled` to false and `telemetryGatewayCustomization.compatibleService` and `telemetryCollectorCustomization.compatibleService` to true to support installations on kubernetes versions less than 1.26" (https://github.com/solo-io/gloo-mesh-enterprise/issues/12311)

v2.4.5 (v2.4.0)

Tue, 21 Nov 2023 18:47:57 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.34.9.
Fixes
- Use allowlists for metric labels in default OTel pipeline (https://github.com/solo-io/gloo-mesh-enterprise/issues/10885)
- Add more otelcol metrics to enable having alerts when we hit queue capacity and similar situations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9062)
- Fixes an issue where multiple destinations in a single route was not handled correctly by portal. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13096)
- Reduce memory used by the gloo-mesh-ui pod with workspace caching when GLOO_MESH_ENABLE_WORKSPACE_CACHE is set to `true`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11874)
- Allow the environment variable `K8S_MEM_LIMIT` to be set as part of the Gloo Platform UI deployment and apply to the apiserver. This makes the go runtime attempt to respect the limits set on the Kubernetes pod (see https://pkg.go.dev/runtime/debug#SetMemoryLimit). (https://github.com/solo-io/gloo-mesh-enterprise/issues/11874)
- Fixes an issue where the redis config map and secret were always mounted even when redis was disabled for the portal chart. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12206)
- skip upgrade validation should only apply to installations with defined revisions (https://github.com/solo-io/gloo-mesh-enterprise/issues/12465)
- Do not add trailing slash when URI is not defined in the delegated child route table matcher. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12692)
- Fixes a performance issue encountered when an ExternalService had a very high number of ports exposed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12722)
- When translating delegated routes use translation context from parent instead of children to resolve destinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12784)
- Fixes an issue where the stitched `ApiDoc` for portal would be continuously created/deleted in a single cluster setup. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13158)
- Fixes helm install errors using new `namespacedRbac` value alongside `istiodSidecar.createRoleBinding` value in legacy helm chart (https://github.com/solo-io/gloo-mesh-enterprise/issues/12164)
- Fixes a gap in the portal translation logic that caused the portal to not be able to support stitching openAPI specifications that contained recursive schema definitions. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11671)
- Removes lint-staged, and runs esbuild on all files in the pre-commit hook, when UI files have changed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11279)
- Cached workspaces now show the correct status in the ui. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12880)

v2.4.4 (v2.4.0)

Thu, 19 Oct 2023 20:46:49 GMT

Dependency Bumps
- solo-io/ext-auth-service has been upgraded to v0.51.0.
- solo-io/skv2 has been upgraded to v0.34.6.
- golang/golang has been upgraded to v1.21.1.
Fixes
- Supports regex rewrite for gloo portal routes. Regex rewrite is supported for prefix, exact and regex matchers. When using capture groups in the regex rewrite the regex expression should not contain any position anchors such as `^` or `$` as they will not work with gloo portal. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11681)
- "Use `configYaml` rather than `config` in the hash for the `opa-config-version` value" (https://github.com/solo-io/gloo-mesh-enterprise/issues/11908)
- OpenAPI spec api version portal outputs should use the version in the route table's portal metadata (https://github.com/solo-io/gloo-mesh-enterprise/issues/12331)
- OpenAPI spec path item parameters and extension props were not being included in the stitched schema (https://github.com/solo-io/gloo-mesh-enterprise/issues/12358)
- Fix a memory leak when constructing the portal config object. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12594)
- Add support for applying JWT policy to destinations to enable service to service authentication use cases. Now, users have the ability to configure JWT authentication policy for both ingress routes, and destinations within the mesh. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7962)
- Fixes helm install errors using new `namespacedRbac` value. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12164)

v2.4.3 (v2.4.0)

Wed, 04 Oct 2023 19:11:30 GMT

Fixes
- Enable TrimProxyConfigPolicy translation to continue despite service destination issues. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11836)

v2.4.2 (v2.4.0)

Mon, 25 Sep 2023 18:44:13 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.34.4.
- solo-io/ext-auth-service has been upgraded to v0.48.0.
- solo-io/rate-limiter has been upgraded to v0.10.0.
Fixes
- Use the certificate with the highest ttl when multiple certificates are present. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10161)
- The VirtualGateway details page in the UI shows only RouteTables that are actually attached to particular listeners. Listeners that use named port selectors now display the port name. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10742)
- Adds support for more complex configurations in a single `AccessPolicy`, for example allowing GET requests from one client and POST requests from another. The `authz` field is deprecated, replaced with a new `authzList` field which supports multiple side-by-side entries, each with the structure and behavior of the deprecated field. Previously, multiple `AccessPolicies` applied to the same workload were required to achieve this behavior. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7579)
- Disables 'telemetryCollectorCustomization.enableCloudMetadataProcessing' by default since cloud metadata processing is non-optimal due to API calls to scrape metadata are not being cached. This results in a large number of API calls, thereby easily exhausting API request quota limits. This flag was newly introduced in 2.4.0, so it is safe to disable it and consider it experimental till the metadata scraping is optimized to cache responses and not make unnecessary API calls for every log message ingested by the telemetry processor. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11971)
- "a meta.NoKindMatchError is returned from List() calls when only a subset of CRDs is missing from the group (and not the whole group). Our IsNotFoundError helper now catches these errors too." (https://github.com/solo-io/gloo-mesh-enterprise/issues/11662)
- Fix an issue with applying service isolation to a workspace in large scale environments. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11508)
- Fix an issue with service isolation translation non-deterministic NetworkPolicy resources when the Gloo Network feature flag has been enabled. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12009)
- Workspace creation wizard replaced with old modal until feedback addressed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11624)
- Fix unexpected available route to import in the Workspace Details UI page (https://github.com/solo-io/gloo-mesh-enterprise/issues/11944)
- Use float instead of uint32 in metrics.proto to fix the Graph UI bug where we were throwing away a lot of data values in between 0 and 1. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7985)
- Modify some UI computations to show the correct requests / second and latency values, by using averages instead of sums. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7985)
- Modify the Graph UI to use backend-computed display name everywhere. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7985)
Helm Changes
- "Introduces 'namespacedRbac' helm field on glooMgmtServer, glooUi, glooAgent, and extAuthService.extAuth to allow configuration of namespace-scoped RBAC policies (i.e. Role / RoleBinding), and namespace-scoped manager cache and controllers. Currently, secrets are the only resource that can be namespaced. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10521)

v2.4.1 (v2.4.0)

Fri, 15 Sep 2023 16:49:48 GMT

Dependency Bumps
- solo-io/ext-auth-service has been upgraded to v0.47.1.
- k8s.io/api has been upgraded to v0.28.1.
- k8s.io/apimachinery has been upgraded to v0.28.1.
- k8s.io/client-go has been upgraded to v0.28.1.
- k8s.io/kubectl has been upgraded to v0.28.1.
- sigs.k8s.io/controller-runtime has been upgraded to v0.15.0.
- istio.io/istio has been upgraded to 1.18.2.
- solo.io/skv2 has been upgraded to 0.34.0.
Fixes
- 'Ambient workloads are now handled properly in the UI Graph. Also, workspaces and clusters sharing names is now okay.' (https://github.com/solo-io/gloo-mesh-enterprise/issues/10014)
- Improve memory usage by avoiding unnneccesary allocs when comparing object refs for RouteTable to VirtualGateway relationships (https://github.com/solo-io/gloo-mesh-enterprise/issues/11308)
- Fix JWT per-policy provider name. Currently it's using the route-name, but this was causing very high numbers of providers, and therefore very large amounts of requests to the JWKS backend. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11368)
- Fixed the portal server /apis endpoint returning null instead of an empty array when no apis are present. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11387)
- Tooltips in the graph will now properly display information on a node's subnet, platform, and vpc. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11802)
- The primary UI graph now provides the Platform environment information. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11802)
- Fixed bugs in the portal server pertaining to api key creation for a plan with multiple extauth policies and the /usage-plans endpoint not returning all ext auth policies for the same plan. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11309)
- The Rate Limit Policy details page will display an error if the policy references an invalid RateLimitServerConfig. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8453)
- Fix an issue where invalid PeerAuthentication resources would be created when applying service isolation to a workspace. This was caused by a bug in the translation logic when processing Kubernetes Services that don't contain selectors. Now, these invalid resources will not be created. Users should configure an explicit AccessPolicy that selects this type of Service instead. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8833)
- Fix an issue where invalid PeerAuthentication resources would be created when an AccessPolicy applyToDestinations selector will select a Kubernetes Service that doesn't contain any labels. This was caused by a bug in the translation logic that did not properly account this use case. Now, a warning on the AccessPolicy resource will be shown when this occurs, and the invalid PeerAuthentication resource will not be created. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8833)
- "Outlier detection policy applied to an external service has an effect now." (https://github.com/solo-io/gloo-mesh-enterprise/issues/6119)
- Allow deployment of multiple gateways with GLM without revisions. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11455)
- Keep ingress/egress gateways if ambient profile is selected. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11534)
- Remove global network configuration if ambient profile is selected. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11488)
- Fix an issue when JWTPolicy resources configure the "claims" or "requiredScopes" fields when service isolation has been enabled for a workspace. Previously, the management plane would translate conflicting Istio resources, which would break any gateway routes with JWT policy applied to them. Now, users can configure JWT authorization policies when service isolation is enabled for a workspace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11464)
- Adds the option for also getting the schema in the list APIs response on the portal REST server. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10699)
- The `glooUi.auth.oidc.clientSecret` helm value is no longer required when setting up OIDC. Allow users to reference an existing OIDC secret with `glooUi.auth.oidc.clientSecretName`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11125)
Helm Changes
- Add ipVersion parameter to glooUi helm chart, allowing control over IPV4, IPV6 or dual stack operation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10893)
- Use a `lookup` command to look for existing Gloo UI OIDC secrets in the cluster. As a result, commands like `helm generate` will no longer work with the ui-auth.yaml template. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11125)

v2.4.0 (v2.4.0)

Mon, 28 Aug 2023 19:40:00 GMT

v2.4.0-rc5 (v2.4.0)

Thu, 24 Aug 2023 21:53:37 GMT

Dependency Bumps
- solo-io/skv2-enterprise has been upgraded to v0.31.8-gp.
Fixes
- Configure mgmt server and agent readinessProbe port (https://github.com/solo-io/gloo-mesh-enterprise/issues/11314)
- Handle readiness check when multiple agents are running (https://github.com/solo-io/gloo-mesh-enterprise/issues/11302)
- Fix agent not receiving updates from k8s services until pod restart (https://github.com/solo-io/gloo-mesh-enterprise/issues/11370)
- Remove the generationchanged predicate from the generic cache reconciler to allow status updates to flow as the UI expects. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11421)
- Propagate clusterDomain from KubernetesCluster to IstioOperator values when using IstioLifecycleManager. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6478)
- Added missing fields on access policy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10970)
- Fixes error when fetching Virtual Gateway. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11284)
- Adding support for TCP and TLS routes in UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8523)
- Workspace lists no longer capitalize first letter. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8461)
New Features
- Dynamically update selected namespaces list that the `EXPERIMENTAL_WATCH_NAMESPACES_SELECTOR` env selects with k8s set based requirements. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10325)

v2.4.0-rc4 (v2.4.0)

Wed, 16 Aug 2023 19:51:21 GMT

Fixes
- Add experimental flag to filter out the secrets which get added into the cache for reading/listing. These selectors follow the [kubernetes field selectors syntax](https://kubernetes.io/docs/concepts/overview/working-with-objects/field-selectors/). To enable this setting set the following environment variable on the gloo-mesh-enterprise pod: - name: EXPERIMENTAL_SECRET_FIELD_SELECTOR
- Addressed issue that prevented the gRPC server in the Gloo Platform agent from starting correctly and caused the logs to be spammed with `grpc server: waiting for all components to register...` info messages. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11182)
- Ensure that global translator only translates resources in connected clusters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8307)
- The new `FEATURE_ISTIO_LIFECYCLE_SKIP_TELEMETRY_DEFAULTS` environment variable can be set on the management server to control the default behavior when `envoyMetricsService` is not explicitly set in the `meshConfig` of `IstioLifecycleManager` and `GatewayLifecycleManager` resources. If set to `true`, we will not default the value of that field to the address of the Gloo Platform agent service when translating the lifecycle manager resources to `IstioOperator` ones. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9722)
- Fixes bug in `JWTPolicy` where `claimsToHeaders` was not always respected when `allowMissingOrFailed` was set to `true`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10588)
- Add label selector option `EXPERIMENTAL_WATCH_NAMESPACE_SELECTOR` to experimental features to filter triggers for mgmt server. The env value is used to limit the namespaces that will be considered for discovery in the cluster where the server is running. The value of the env is a label selector expression in the same form as the k8s set based requirements: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#set-based-requirement. The current limitation with this feature is that the selectors will be statically evaluated only once during startup so any relevant updates to the selectors or namespaces will still require the mgmt server to restart to update the filtered namespaces. This pr also fixes sort in the discovered mesh to avoid triggering extraneous reconciles. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10325)
- Fips agent version no longer causes UI to show a version mismatch. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10045)
- GraphQL addon license checks removed in favor of using existing gateway license. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10864)
- On the graph, container boxes with only hidden nodes now hide themselves properly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9584)
Helm Changes
- "Add or enable readiness probes in mgmt-server, agent, and gloo-mesh-redis" (https://github.com/solo-io/gloo-mesh-enterprise/issues/10347)

v2.4.0-rc3 (v2.4.0)

Thu, 10 Aug 2023 17:02:04 GMT

Extra Notes
- This release contained no user-facing changes.

v2.4.0-rc2 (v2.4.0)

Wed, 09 Aug 2023 21:37:30 GMT

Dependency Bumps
- solo-io/licensing has been upgraded to v0.4.0.
- docker/distribution has been upgraded to v2.8.2.
- deislabs/oras has been upgraded to v0.11.1.
- moby / docker/moby / docker has been upgraded to v20.10.25.
- solo-io/gloo-network-agent has been upgraded to v0.2.1.
Fixes
- When selecting RouteTable's to expose in the portal, selecting RouteTable's across different namespaces would cause the portal config to be overwritten. This resulted in only the last translated RouteTable being exposed in the portal. This has been fixed by ensuring that the portal config is not overwritten when selecting RouteTable's across different namespaces. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10240)
- Fix bug in cross cluster routing when using the same subset in multiple routes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10358)
- Fixes an issue where all agent replicas would attempt to discover openAPI specs and upsert apidocs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10908)
- Downgrade the warning message from a Dpanic to a WARN when redis sync falls behind and needs to do a readAll. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10919)
- The UI no longer shows duplicate entries on its list of APIs or its list of RouteTables on policy pages. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7304)
- Populate Status for the GraphQLAllowedQueryPolicy and GraphQLPersistedQueryCachePolicy resources. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7606)
- "Allow disabling both the telemetry collector and the legacy metrics pipeline by setting `telemetryCollector.enabled: false` and `legacyMetricsPipeline.enabled: false` in the Helm values" (https://github.com/solo-io/gloo-mesh-enterprise/issues/9859)
- Fixes an issue where access to usage plans are not checked if the visibility of the developer portal is set to public. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10403)
- Do not recall base64 encode on identity token, was causing it to grow indefinitely. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10818)
- "fix for ui tracing page's sidebar nav showing when tracing base path is empty" (https://github.com/solo-io/gloo-mesh-enterprise/issues/10430)
- Debug page filters now split into 4 different categories. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10538)
- Added and hooked up Listener Connection policy details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9465)
- UI now informers users when they have no valid licenses. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10805)
- Fixed a broken link on OpenAPI destinations table. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9880)
- Broken links with undefined workspace fixed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10696)
- Improve UX around empty or pending statuses in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10531)
Helm Changes
- Add controlPlaneRevision to helm template for gateway installation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9841)
- "Allow disabling both the telemetry collector and the legacy metrics pipeline by setting `telemetryCollector.enabled: false` and `legacyMetricsPipeline.enabled: false` in the Helm values" (https://github.com/solo-io/gloo-mesh-enterprise/issues/9859)
- Updated the portal helm chart to use the `addonNamespace` value from the common helm values if it is provided. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10786)
- "removes unused demo.tracingEnabled value from helm api" (https://github.com/solo-io/gloo-mesh-enterprise/issues/10430)
New Features
- Adds details pages for GraphQLAllowedQueryPolicy and GraphQLPersistedQueryCachePolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6265)
- Add meshctl redis options for switching active cluster in HA mode. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10309)
- "Allow passing `enabledExperimentalApi` flag to helm when installing crds" (https://github.com/solo-io/gloo-mesh-enterprise/issues/9019)

v2.4.0-rc1 (v2.4.0)

Fri, 21 Jul 2023 20:46:26 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.31.2.
Fixes
- Change OpenTelemetry Configuration to account for IPv6 addresses. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10140)
- Improve page load times in the UI in environments with a large number of resources. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10160)
- Add cluster to subset object to properly track subsets location. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10291)
- add a rw mutex to subset struct to prevent data race (https://github.com/solo-io/gloo-mesh-enterprise/issues/10374)
- Allow additional SANs when creating mgmt plane certificates (https://github.com/solo-io/gloo-mesh-enterprise/issues/6690)
- "Support multiple replicas of ext-auth-service" (https://github.com/solo-io/gloo-mesh-enterprise/issues/7432)
- Subsets were not correctly discoverd with scoped workspaces. This has been fixed by switching to the context of the remote services, which may be imported from other workspaces, when discovering remote subsets.
- Improve page load times for the Destinations tab of the Workspace Details page in the UI in environments with a large number of destinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9631)
- Fix gloo-agent service discovery to not depend on POD_NAME (https://github.com/solo-io/gloo-mesh-enterprise/issues/9707)
- "Use CR statuses in the apiserver to filter for healthy and unhealthy resources, to improve performance." (https://github.com/solo-io/gloo-mesh-enterprise/issues/10175)
- Disable ingestion of high cardinality metrics from gloo-mesh namespace in (https://github.com/solo-io/gloo-mesh-enterprise/issues/5949)
- "Optimize Apiserver Debug handler calls for cases with a large number of workspaces" (https://github.com/solo-io/gloo-mesh-enterprise/issues/10322)
- "Show default destinations properly in the Gloo UI Route Table details." (https://github.com/solo-io/gloo-mesh-enterprise/issues/10222)
- Fix an issue when upgrading from a 2.2+ version of Gloo Platform to a 2.3+ version when the glooAgent.istiodSidecar.createRoleBinding value has been enabled. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10176)
- Fix issues with configuring JWT authorization rules for 1.14.x and older Istio versions. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9945)
- Fix an issue where the Envoy route cache was always being cleared when configuring JWT authorization rules for gateway routes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10125)
- Fixed issue with workspaces being undefined on some route forwards.
Helm Changes
- "Support production use-case for embedding tracing UI in Gloo UI" (https://github.com/solo-io/gloo-mesh-enterprise/issues/10430)
- Updated the default namespace for the portal server to be the gloo-mesh-addons namespace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9491)
- Fix helm chart to account for existing license keys with the name `license-keys`. A helm upgrade will only write out a secret for a license keys if:
- Rename the istiod-agent ClusterRoleBinding manifest to avoid conflicts with the legacy agent helm chart. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10176)
- "Add default pipelines to telemetry customization." (https://github.com/solo-io/gloo-mesh-enterprise/issues/10427)
- Add new default `extraVolumes` and `extraVolumeMounts` value to support Cilium flow visualization (https://github.com/solo-io/gloo-mesh-enterprise/pull/10431)
New Features
- Add config to support streaming hubble flows directly from cilium. No need for hubble relay! (https://github.com/solo-io/gloo-mesh-enterprise/issues/10400)
- "Users can now upgrade their Istio installations without having to provide a revision." (https://github.com/solo-io/gloo-mesh-enterprise/issues/5126)
- "Allow OPA ExtAuthPolicy to return a reason for an auth decision" (https://github.com/solo-io/gloo-mesh-enterprise/issues/5403)
- Configure tracing in the GP otel pipeline and add jaeger sub-chart. For demo purposes only. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8913)
- Embedded Jaeger UI is accessible through UI's envoy proxy at '/tracing-ui' route and is behind the ext_authz filter for seamless authn and authz from gloo-mesh. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9644)
- Jaeger sub-chart default values configure all-in-one deployment with memory storage (simplest). (https://github.com/solo-io/gloo-mesh-enterprise/issues/9646)
- Add support for portal usage plans using ext-auth policies configured with OIDC or AccessTokenValidation (https://github.com/solo-io/gloo-mesh-enterprise/issues/9518)
- Add hubble observe functionality for viewing hubble flows via redis. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9728)
- Create query library for interfacing with redis streams of Otel logs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10183)
- "Allow dry runs for authz on access policies." (https://github.com/solo-io/gloo-mesh-enterprise/issues/8122)
- inference for ambient RouteTables for temporary backwards-compatibility in the absence of applyToDestination (https://github.com/solo-io/gloo-mesh-enterprise/issues/9344)
- Add applyToDestination to routeTable API (https://github.com/solo-io/gloo-mesh-enterprise/issues/9964)
- Add the ApiSchemaDiscovery CRD that configures the discovery of API schemas from services by URL. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8041)
- Wizard Generate Workspace/Workspace Settings apiserver handlers added. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10118)
- "Add option to Otel Pipeline to scrape network metadata from Cloud compute" (https://github.com/solo-io/gloo-mesh-enterprise/issues/10332)
- Add support for mgmt config sync between active and passive mgmt servers running on different clusters in HA mode. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8893)
- Expose imagePullSecrets for Istio operator controller deployment. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9894)
- Expose k8s resource configuration for Istio operator controller deployment. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9928)
- Expose WAIT_FOR_RESOURCES_TIMEOUT for Istio operator controller deployment. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9930)
- Add SkipUpgradeValidation to allow potentially unsafe in-place upgrades. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9929)
- IPv6 supported for VirtualDestination (https://github.com/solo-io/gloo-mesh-enterprise/issues/9707)
- Add support for resource-based, cross-account lambda invoke. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8868)
- Workspace config wizard finished and added into overview page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9946)

v2.4.0-beta2 (v2.4.0)

Thu, 22 Jun 2023 22:06:27 GMT

Breaking Changes
- Upgrade Kubernetes libraries to 1.26.4 (https://github.com/solo-io/gloo-mesh-enterprise/issues/7926)
- Updates Waypoint Lifecycle managet to adapt to producer-only waypoints ane emit Gateway resources. This brings the waypoint LCM in line with ambient alpha in Istio 1.18, reflecting the breaking changes that have happened in Istio Ambient as it moved from the experimental phase to alpha (https://github.com/solo-io/gloo-mesh-enterprise/issues/9100)
Dependency Bumps
- k8s.io/api has been upgraded to v0.26.4.
- k8s.io/apimachinery has been upgraded to v0.26.4.
- k8s.io/client-go has been upgraded to v0.26.4.
- k8s.io/kubectl has been upgraded to v0.26.4.
- sigs.k8s.io/controller-runtime has been upgraded to v0.14.6.
- istio.io/istio has been upgraded to 1.16.4.
- solo-io/skv2 has been upgraded to v0.29.10.
- solo-io/ext-auth-service has been upgraded to v0.35.6.
- solo-io/rate-limiter has been upgraded to v0.8.6.
- solo-io/ext-auth-service has been upgraded to v0.38.1.
- solo-io/rate-limiter has been upgraded to v0.8.5.
- alpine/alpine has been upgraded to v3.18.0.
Fixes
- Fix an issue where the console pod in the gloo-mesh-ui would not pass readiness checks in ipv6 cluster. (https://github.com/solo-io/gloo-mesh-enterprise/issues/721)
- Subset labels are now defermined by pod template labels instead of worlkoad labels. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7946)
- Destination counts in the Workspace overview section of the UI now match the number of destinations those workspaces contain. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9183)
- Updates skv2 dependency to v0.29.8 to include a bug fix for schema generation so targetPort is expected to be a number or string literal instead of an object. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9194)
- Reports success status for LoadBalancerPolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9503)
- Fixes bug where gloo-mesh-ui pod does not become ready in ipv4 only cluster. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9540)
- Meshctl check will now return failed when agents are not connected (https://github.com/solo-io/gloo-mesh-enterprise/issues/9697)
- Allow the ability to turn off relationship tracking via EXPERIMENTAL_DISABLE_RELATIONSHIP_WRITES env var. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9354)
- "Quality of life improvements on the Debug page. Remove confusing 'limited functionality' banner, and return all resources in the snapshot." (https://github.com/solo-io/gloo-mesh-enterprise/issues/7553)
- "Improve YAML output in the UI to remove information from the managedFields field." (https://github.com/solo-io/gloo-mesh-enterprise/issues/7553)
- Policy routes now display correctly on DLP policies. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7990)
- Report an error in the status when a RouteTable is not allowed by the VirtualGateway it selects. Also, fix a bug where the NumParentRouteTables field on the RouteTableStatus was not being set correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8739)
- Fixes issue where the GraphQL gRPC protobuf registry incorrectly includes APIDocs that are not selected by the selector in the GraphQLResolverMap. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9751)
- Update the listener connection policy status when policy is applied. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9978)
Helm Changes
- Allow to define custom annotation for ext-auth-service and rate-limiter deployment service. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9345)
- Provide helm flag to use where optional IstioOperator CRD install was not functioning for terraform managed helm. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9520)
- Fix string wrapping in generated yaml, it can cause issues for certain software. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9516)
- Use alpine redis for better CVE coverage. (https://github.com/solo-io/rate-limiter/issues/176)
- We upgraded to the `go-redis/v9` client, which has more configuration options and has the following changes: - The property `idleCheckFrequency` is dropped and we removed it from the Helm chart. - The configuration option `maxConnAge` is deprecated, use `connMaxLifetime` instead. - The configuration option `idleTimeout` is deprecated, use `connMaxIdleTime` instead. - New configurable properties are `contextTimeoutEnabled`, `maxIdleConns`, `maxRedirects`, `readOnly`, `routeByLatency`, `routeRandomly`, `masterName` (https://github.com/solo-io/gloo-mesh-enterprise/issues/8975)
- Upgrade redis from 6.2.6 -> 7.0.11 (https://github.com/solo-io/rate-limiter/issues/176)
New Features
- Add support for configuring JWT claim-based authorization rules for individual gateway routes. Previously, users needed to specify which claims need to be extract using the claimsToHeaders field, and then perform any JWT authorization by defining OPA rules. Now, the JWTPolicy API has been updated to allow users to configure JWT authentication and authorization policy within a single API. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6365)
- "Add maxRequests and maxPendingRequests to the HTTPConfig in the Connection Policy to support circuit breaking." (https://github.com/solo-io/gloo-mesh-enterprise/issues/7812)
- Add TCPKeepAlive settings that select VirtualGateway listeners in the ListenerConnectionPolicy (https://github.com/solo-io/gloo-mesh-enterprise/issues/7815)
- Users can now set clear_route_cache for JWTPolicy providers. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9231)
- Add support for additional cilium metrics, including metrics from the cilium agent itself. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9482)
- The Portal server `/apis` endpoint now additionally returns `apiProductId`, `apiProductDisplayName`, and `apiVersion` if the information is present in the corresponding RouteTable's `PortalMetadata`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9793)
- Bump skv2 to v0.29.7 to support helm extra environment variables. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7143)
- "Adds support for 'healthy panic threshold' and 'update merge window' common load balancer settings." (https://github.com/solo-io/gloo-mesh-enterprise/issues/7810)
- "External workloads: enable core routing capability" (https://github.com/solo-io/gloo-mesh-enterprise/issues/9331)
- meshctl commands to generate bootstrap bundle and join tokens required to onboard external workload to the mesh. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9335)
- "External workload: propagate user labels as is" (https://github.com/solo-io/gloo-mesh-enterprise/issues/9330)
- Add support for configuring the header name that will contain the output of a successfully verified JWT payload. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7964)
- Updates the portal server auth middleware to parse claims from JWT Authorization access tokens. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9233)
- "SPIRE integration in Gloo Platform" (https://github.com/solo-io/gloo-mesh-enterprise/issues/9334)
- This updates the Cilium information on the Overview page to include Cilium Operator and Hubble Relay information. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9727)
- Load Balancer policy details page added. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9143)

v2.4.0-beta1 (v2.4.0)

Wed, 17 May 2023 18:06:22 GMT

Dependency Bumps
- graphql-go/graphql has been upgraded to v0.8.1.
Fixes
- All the Gloo Platform components now output log timestamps in ISO8601 format by default. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6395)
- Fix issues starting gloo-mesh-ui in ipv6 environment. (https://github.com/solo-io/gloo-mesh-enterprise/issues/721)
- Fix an issue where a JWTPolicy that configures an empty JWT providers map would translate an invalid JWT listener filter. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9025)
- Stop JWT policy being erroneously applied to sidecars. This policy will is only supported on North-South gateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7873)
- Fix an issue with a JWTPolicy resource that configures multiple JWT providers that share the same claimsToHeaders claim key, but different header values. Previously, there was no logic that mapped an individual JWT providers to it's claimsToHeaders configuration, which resulted in all the claimsToHeaders configurations being merged together for a single route. This meant that an authenticated request would contain all the extracted header values for a shared claim key. Now, there's logic that maps a JWT provider to it's claimsToHeaders configuration, and an authenticated request will only contain the desired claimsToHeaders configuration. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7921)
- Since CloudProviders are no longer used in workspaces, we can remove from the WorkspaceSettings export. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8046)
- Wrong destination workload id labels with lambda (or any external) destination service caused the graph to miss destination nodes. This fixes the labels setting so that the destination lambda service will reappear. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8248)
- Fix an issue where a VirtualDestination is exported to workspaces with a resource selector, the translated ServiceEntry ignores the selector so it would be exported to all the namespaces in the workspace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8588)
- Viewing an AccessLogPolicy in the dashboard UI will no longer 403. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8605)
- Fixes an issue where where the openAPI path did not match the path configured in the route table. openAPI path now matches the configured path in the route table with any path rewrite portion removed if it is set. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8621)
- Fixes an issue where where the server definitions in the openAPI spec were not populated if the route table being processed is a child route table and host definitions are defined in the parent route table. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8813)
- Fixes an issue with the helm installation for the portal server where the secret is created in the wrong namespace (https://github.com/solo-io/gloo-mesh-enterprise/issues/8643)
- Remove login & logout endpoints from the OpenAPI spec for the Portal API. Also removed the corresponding endpoints from the handler code and update the `identityToken` in the openapi spec for the Portal API with the correct cookie name. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8665)
- Fixed a bug where the portal server was not storing the API key with the correct metadata resulting in dynamic metadata not being properly extracted and propagated upstream from the ext-auth-server. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8695)
- Add a tiebreaker case if input resource creation time between objects is equal, which is needed when several of the same type of resources are created at the same time. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8703)
- Only trigger status calculations for objects that have changes in their reportsets. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8781)
- Adds WorkspaceReport field documentation (https://github.com/solo-io/gloo-mesh-enterprise/issues/8794)
- Fix an issue where the JWTPolicy translator plugin was always setting the Envoy JWT per-route "clearRouteCache" filter field to true. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8877)
- Pass host protocols from the route table translator to the route table plugin so that the portal plugin can correctly build the full URL for the routes exposed on the portal. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8941)
- To avoid confusion about an unsecure state vs uncertainty, labels about mtls not being applied have been removed from the graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9018)
- Add a download button to the view YAML area. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9320)
- Fix HTTP regex rewrite of path header for Istio 1.14.x and older. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9323)
- Fix portal stitched schema not building the server correctly in a delegated route table scenario. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9494)
- "Enforce that only a single extauth or waf policy filters are ever created per listener. The first policy applied will be taken and the rest rejected." (https://github.com/solo-io/gloo-mesh-enterprise/issues/9035, https://github.com/solo-io/gloo-mesh-enterprise/issues/6591)
- Fixes NewDelegatingClient without Deepcopy for specific GVKs to actually do what it says. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7714)
- Overview cards have update link/expand behavior, and collapse arrow direction flipped. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7438)
- Fixes an issue the too many request, unauthorized and forbidden responses were not added to the responses for a openapi path that had a usage plan applied (https://github.com/solo-io/gloo-mesh-enterprise/issues/8947)
- Fixes an issue where the api key header was not included in the security scheme for an openapi path that had a usage plan applied. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8814)
- Remove IstioOperator from TranslatorInputSnapshot and ApiserverInputSnapshot. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8338)
- Fix issues with admin reports in multi-management server setup (https://github.com/solo-io/gloo-mesh-enterprise/issues/8575)
- Fix missing report GVK for service and workload (https://github.com/solo-io/gloo-mesh-enterprise/issues/8646)
- Use asnyc queue instead of a blocking channel to fire status reconciler. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8781)
- Graph fetch settings no longer get messed up when setting a traffic range. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9184)
- Graph container label colors tweaked for readability when unselected. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9295)
- Addressed feedback for GraphQL Explorer. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8874)
- Notification added when schema text override is present on GraphQL explorer. Option added to remember override instead of it remembering automatically. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8697)
- Licenses failing to load no longer results in blank content area. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8786)
- Route Table link added to header of OpenAPI details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8018)
- Documentation link on top bar now links to version-specific link instead of always to latest. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8818)
- Virtual gateway listeners route table now correctly list their workspace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8586)
- Fixes bug where agent would not warm mid minor upgrade due to unrecognized CRDs from the mgmt cluster (https://github.com/solo-io/gloo-mesh-enterprise/issues/6938)
Helm Changes
- Only applying the IstioOperator crd if it doesn't exist, or it exists and is owned by the helm release. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8310)
- Avoid nil error by ensuring that annotations exist on the CRD. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8981)
- Allow skipping of creation of the global workspace that is otherwise automatically created when the gloo-gateway-demo helm profile is used during the installation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8417)
New Features
- Adds support for automatic generation of GraphQL resources from an existing gRPC server (via reflection) or compiled protobuf definition. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4695)
- Adds ability to automatically rewrite host header for http route (https://github.com/solo-io/gloo-mesh-enterprise/issues/5788)
- Add a new policy that allows for configuring the per connection buffer limit for gateway listeners. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7503)
- Add support for applying multiple JWTPolicy resources to a single gateway. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7573)
- Adds support for egress traffic through dedicated egress gateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/765)
- "Support relabelling for both IPv4 and IPv6 in the prometheus config." (https://github.com/solo-io/gloo-mesh-enterprise/issues/7701)
- Adds the ability for Gloo Gateway to perform active health check on upstream cluster. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7807)
- Adds the capability to rewrite the path of an http request using regex subtitution. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7813)
- Uses new Status for RateLimitClientConfig (https://github.com/solo-io/gloo-mesh-enterprise/issues/8196)
- Add status plugin for PortalGroup (https://github.com/solo-io/gloo-mesh-enterprise/issues/8205)
- Add status plugin for PortalConfig (https://github.com/solo-io/gloo-mesh-enterprise/issues/8206)
- Add status plugin for the CloudProvider API. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8207)
- Remove the CloudResourcesStatus fields from the CloudResource API. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8208)
- Add status plugin for WaypointLifecycleManager. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8209)
- Adds LoadBalancerPolicy to the Gloo Mesh API (https://github.com/solo-io/gloo-mesh-enterprise/issues/8354)
- Apiserver and UI details page added for Active Health Check policy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8489)
- Add new status plugin for WAFPolicy resource. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8706)
- Add new status plugin for RateLimitServerConfig resource. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8711)
- Add route tracking to the HTTPBufferPolicy status (https://github.com/solo-io/gloo-mesh-enterprise/issues/8538)
- AccessPolicy adds support for ExternalService's that egress (https://github.com/solo-io/gloo-mesh-enterprise/issues/8989)
- API for external workloads (agent VMs, bare-metal) (https://github.com/solo-io/gloo-mesh-enterprise/issues/7886)
- "ExternalWorkload translator" (https://github.com/solo-io/gloo-mesh-enterprise/issues/2124)
- "External workload: add access policy and destination selection capability" (https://github.com/solo-io/gloo-mesh-enterprise/issues/9330)
- Add status plugin for ApiDoc (https://github.com/solo-io/gloo-mesh-enterprise/issues/8203)
- Add status plugin for DLPPolicy (https://github.com/solo-io/gloo-mesh-enterprise/issues/8707)
- Add status plugin for DiscoveredGateway (https://github.com/solo-io/gloo-mesh-enterprise/issues/8708)
- Add the GraphQLResolverMap status plugin. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8176)
- Add the GraphQLStitchedSchema status plugin. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8177)
- Add the GraphQLSchema status plugin. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8200)
- Update health check message to explain where it came from (https://github.com/solo-io/gloo-mesh-enterprise/issues/8584)
- Update codegen to allow for custom images via IMAGE_REGISTRY env variable. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7195)
- Sign our container images and helm charts. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3371)
- Add status plugin for the ProxyProtocolPolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8195)
- Add status plugin for the ClientTLSPolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8569)
- Add status plugin for the Kubernetes Service. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8201)
- Adds support for External Services on TCP routes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7989)
- Updates the GraphQL schema UI to show more SDL features, like interface extensions. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5486)
- Trim Proxy Config policy details page added. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7091)

v2.3.24 (v2.3.0)

Fri, 26 Jul 2024 20:43:52 GMT

Dependency Bumps
- golang.org/x/net has been upgraded to v0.23.0.
- golang.org/x/crypto has been upgraded to v0.21.0.
- golang.org/x/sys has been upgraded to v0.18.0.
- golang.org/x/term has been upgraded to v0.18.0.
Fixes
- In the dashboard UI, the access policy details page now shows all selected service accounts. The policy details page no longer shows duplicate destinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12266)
- Policies that are ignored or cause errors for routes with redirect or direct response actions
- AuthorizationPolicies should not be regenerated unnecessarily when selectors share the same values across different properties. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15976)
- In the dashboard UI, the workspace of listener route tables attached to virtual gateways will now be properly displayed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17093)
- "Fix an issue where a TLS RouteTable route configuring duplicate, weighted forwardTo destinations results in an Istio VirtualService with duplicate matchers, which Istio will ignore.
- Ensure delegated RouteTables with the same weight on the same route are sorted by creationTimestamp. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17266)
- Sort endpoints based on their attributes to prevent unintentional reordering between version caused by the implementation of go maps. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17269)
- Fixed an issue where the agent FIPS images were not being built correctly.
- The ExtAuthPolicy details page in the dashboard UI now displays HMAC and OPA Server configurations correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/17776)
- "Add a warning note in the ExternalService's host field about the implications of having a wildcard with no endpoints." (https://github.com/solo-io/gloo-mesh-enterprise/issues/16123)
- The global workspace settings status is now correctly displayed in the workspace settings view. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16103)
- Fix shared-data race condition that could result in statuses being inconsistent or flickering between values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16200)
- Some broken documentation links fixed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16239)
- Fixed broken documentation link on topbar dropdown. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16233)
- Component layering updated for graph to avoid dropdown cutoff issues. (https://github.com/solo-io/gloo-mesh-enterprise/issues/16626)

v2.3.23 (v2.3.0)

Thu, 11 Apr 2024 19:17:16 GMT

Dependency Bumps
- k8s.io/api has been upgraded to v0.27.3.
- k8s.io/apimachinery has been upgraded to v0.27.3.
- k8s.io/client-go has been upgraded to v0.27.3.
- k8s.io/kubectl has been upgraded to v0.27.3.
- solo-io/controller-runtime has been upgraded to v0.15.3-solo.
- istio.io/istio has been upgraded to v1.18.2.
- solo.io/skv2 has been upgraded to v0.34.9.
- solo-io/gloo-network-agent has been upgraded to v0.2.3.
- golang.org/x/net has been upgraded to v0.19.0.
- golang/golang has been upgraded to v1.21.5.
- solo.io/ext-auth-service has been upgraded to v0.36.2-gp-patch0.
- solo.io/rate-limiter has been upgraded to v0.10.6.
- solo.io/rate-limiter has been upgraded to v0.10.5.
- solo.io/ext-auth-service has been upgraded to v0.36.1-gp-patch0.
- docker.io/redis has been upgraded to 7.2.4-alpine.
Fixes
- Eliminated duplicate logging of translation errors, reduced logging errors in each tctx to post-translation, improved error messages for Services that are misconfigured. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10421)
- Unnamed RouteTable routes would previously be given default names which would not be guaranteed to remain consistent across RouteTable updates. The method for creating default route names now results in consistent names across RouteTable updates if the route itself is not updated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12143)
- Add securityContext to rate-limiter redis and use correct user id (https://github.com/solo-io/gloo-mesh-enterprise/issues/12302)
- Add resources, service account and readiness probe to rate-limiter redis (https://github.com/solo-io/gloo-mesh-enterprise/issues/11382)
- Improve load times of the ListWorkspaceDestinations endpoint in the dashboard backend. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12466)
- Remove false error log "internal error: no client supplied but snapshot present for local cluster". (https://github.com/solo-io/gloo-mesh-enterprise/issues/12951)
- In the dashboard on the Workspace overview card, rename "Imported by workspaces" to "Imported Resources". (https://github.com/solo-io/gloo-mesh-enterprise/issues/13040)
- Prometheus-community chart has been updated to 25.11.0. If you are upgrading from Gloo Mesh <= 2.3.22 or <= 2.2.9, the prometheus-server deployment in the gloo-mesh namespace will be automatically deleted before the upgrade of the management plane. You can use the `prometheus.skipAutoMigration: true` Helm value to disable it and handle the migration manually. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13360)
- Fix translation bug in the RouteTable translator where translated Istio resources (VirtualServices and EnvoyFilters) could exceed the Kubernetes 253 max character limit for Meta.Name values. The end result was Gloo failed to persist these translated resources to the desired clusters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13214)
- "When creating workspaces with overlapping namespaces the one with an earlier creation
- Fix memory leak when resources are deleted on mgmt cluster (https://github.com/solo-io/gloo-mesh-enterprise/issues/13256)
- Improve UI query time and resource usage when loading API server pages. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13048)
- Ensures that the relay push_client properly warms every time. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13502)
- Sort resources on the Workspace Details page in the dashboard consistently. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14378)
- Change the "gateway" counts in the UI dashboard to count the number of VirtualGateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14510)
- Reduce memory spiking in Redis by using ensuring tmp keys are only created when necessary. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14688)
- Correctly remove resources from workspaces when those resources are no longer exported. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14912)
- Fix workspace resource import/export status does not always update correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15018)
- Update the prometheus-server-migration job image to be pulled from the quay.io/solo-io/kubectl repository. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14938)
- Do not abort prometheus-server-migration job run if Prometheus deployment does not exist. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15038)
- Fix issue where the dashboard UI could crash when navigating the Workspace Details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15232)
- Fix a bug that would cause meschtl port-forward to fail in some cases. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15281)
- Rebuild the workspace cache whenever the labels on a workspace-defining resource are updated. This will fix some bugs related to workspace definitions and import / exports not being updated when Workspace or Namespace labels are updated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15465)
- Fix issue where invalid openapi spec causes bloating in RouteTable status. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15534)
- The dashboard UI should no longer crash when a user requests a GraphQL route that doesn't exist. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15893)
- Fixed an issue where the `trimAllProxyConfig` option on the global `WorkspaceSettings` was not being inherited by non-global `WorkspaceSettings`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9424)
- Fixed an issue where cpu usage of the mgmt-server was higher than expected while idle. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15059)
- Fix deleting last object of a GVK in redis for relay snapshot updates. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13189)
- Fix issues with configuring JWT authorization rules for 1.14.x and older Istio versions. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9945)
- Debug page updated to have label filters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11247)
- On graph edge details hide "enforced by" if an edge is a ghost node (https://github.com/solo-io/gloo-mesh-enterprise/issues/14658)
- Addressed feedback for GraphQL Explorer. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8874)
- Deep link to resource type removed except for access policy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/13006)
- Improved validation of RetryTimeoutPolicy fields to ensure translated resources are valid Istio resources. (https://github.com/solo-io/gloo-mesh-enterprise/issues/15462)
- The object_write_fails_total agent metric is now scraped by default by the Gloo Platform telemetry pipeline.
- Fixes bug where oldest retry timeout policy was not being used for conflicting retry timeout policies,
Helm Changes
- Update the prometheus-community chart to 25.11.0, which updates Prometheus to v2.49.1 (https://github.com/solo-io/gloo-mesh-enterprise/issues/13360)
- Implement a Helm hook to re-deploy Prometheus automatically during the upgrade of the the prometheus-community chart from 19.7.2 to 25.11.0. The hook can be disabled by setting the `prometheus.skipAutoMigration` Helm value to `true`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14726)
- Allow users to override the image used in prometheus-server-migration job by setting the helm values `prometheus-server-migration.image`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/14938)
- "In the gloo-platform chart, add helm value `glooUi.auth.requestTimeout` with a default of 2 seconds to allow users to configure the timeout for external auth requests." (https://github.com/solo-io/gloo-mesh-enterprise/issues/11835)
- "In the gloo-mesh-enterprise chart, add helm value `glooMeshUi.auth.requestTimeout` with a default of 2 seconds to allow users to configure the timeout for external auth requests." (https://github.com/solo-io/gloo-mesh-enterprise/issues/11835)
- "Change the default timeout for Gloo UI external auth requests from 0.5s to 2s." (https://github.com/solo-io/gloo-mesh-enterprise/issues/11835)
- The experimental sidecar-accel feature has been removed (https://github.com/solo-io/gloo-mesh-enterprise/issues/13841)

v2.3.22 (v2.3.0)

Fri, 10 Nov 2023 19:00:45 GMT

Fixes
- When translating delegated routes use translation context from parent instead of children to resolve destinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12784)
- Cached workspaces now show the correct status in the ui. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12880)
- Only request workspace details when a workspace card is expanded on the overview page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12994)

v2.3.21 (v2.3.0)

Mon, 30 Oct 2023 18:36:07 GMT

Dependency Bumps
- solo-io/ext-auth-service has been upgraded to v0.35.8-gp-patch1.
Fixes
- Use allowlists for metric labels in default OTel pipeline (https://github.com/solo-io/gloo-mesh-enterprise/issues/10885)
- Add more otelcol metrics to enable having alerts when we hit queue capacity and similar situations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9062)
- Reduce memory used by the gloo-mesh-ui pod with workspace caching when GLOO_MESH_ENABLE_WORKSPACE_CACHE is set to `true`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11874)
- Allow the environment variable `K8S_MEM_LIMIT` to be set as part of the Gloo Platform UI deployment and apply to the apiserver. This makes the go runtime attempt to respect the limits set on the Kubernetes pod (see https://pkg.go.dev/runtime/debug#SetMemoryLimit). (https://github.com/solo-io/gloo-mesh-enterprise/issues/11874)
- Fixes a performance issue encountered when an ExternalService had a very high number of ports exposed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12722)
- Fixes helm install errors using new `namespacedRbac` value in legacy helm chart. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12164)

v2.3.20 (v2.3.0)

Fri, 20 Oct 2023 13:07:24 GMT

Dependency Bumps
- golang/golang has been upgraded to v1.21.1.
Fixes
- Fix a memory leak when constructing the portal config object. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12594)
- Removes lint-staged, and runs esbuild on all files in the pre-commit hook, when UI files have changed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11279)

v2.3.19 (v2.3.0)

Wed, 11 Oct 2023 00:41:56 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.29.12-gp-patch1.
Fixes
- The VirtualGateway details page in the UI shows only RouteTables that are actually attached to particular listeners. Listeners that use named port selectors now display the port name. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10742)
- Enable TrimProxyConfigPolicy translation to continue despite service destination issues. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11836)
- Fixes helm install errors using new `namespacedRbac` value. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12164)
- Revert bump Otel to 0.66.4, since it requires Kubernetes 1.26 (https://github.com/solo-io/gloo-mesh-enterprise/issues/12214)

v2.3.18 (v2.3.0)

Mon, 25 Sep 2023 21:10:40 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.29.12-gp-patch0.
- solo-io/ext-auth-service has been upgraded to v0.35.8-gp-patch0.
- k8s.io/kubectl has been upgraded to v0.25.8.
- k8s.io/cli-runtime has been upgraded to v0.25.8.
- solo-io/ext-auth-service has been upgraded to v0.35.8.
Fixes
- Use the certificate with the highest ttl when multiple certificates are present. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10161)
- Fix ExtAuthPolicy with allowedUpstreamHeaders causing a 400 Bad Request response when the response to the passthrough service doesn't contain one of the specified headers (https://github.com/solo-io/gloo-mesh-enterprise/issues/11405)
- Fix an issue with applying service isolation to a workspace in large scale environments. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11508)
- Fix an issue with service isolation translation non-deterministic NetworkPolicy resources when the Gloo Network feature flag has been enabled. (https://github.com/solo-io/gloo-mesh-enterprise/issues/12009)
- Fix unexpected available route to import in the Workspace Details UI page (https://github.com/solo-io/gloo-mesh-enterprise/issues/11944)
Helm Changes
- "Introduces 'namespacedRbac' helm field on glooMgmtServer, glooUi, glooAgent, and extAuthService.extAuth to allow configuration of namespace-scoped RBAC policies (i.e. Role / RoleBinding), and namespace-scoped manager cache and controllers. Currently, secrets are the only resource that can be namespaced. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10521)

v2.3.17 (v2.3.0)

Fri, 15 Sep 2023 14:04:42 GMT

Fixes
- Improve memory usage by avoiding unnneccesary allocs when comparing object refs for RouteTable to VirtualGateway relationships (https://github.com/solo-io/gloo-mesh-enterprise/issues/11308)
- Meshctl check will now return failed when agents are not connected (https://github.com/solo-io/gloo-mesh-enterprise/issues/9697)
- Fix an issue when JWTPolicy resources configure the "claims" or "requiredScopes" fields when service isolation has been enabled for a workspace. Previously, the management plane would translate conflicting Istio resources, which would break any gateway routes with JWT policy applied to them. Now, users can configure JWT authorization policies when service isolation is enabled for a workspace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11464)

v2.3.16 (v2.3.0)

Tue, 05 Sep 2023 19:39:39 GMT

Fixes
- 'Ambient workloads are now handled properly in the UI Graph. Also, workspaces and clusters sharing names is now okay.' (https://github.com/solo-io/gloo-mesh-enterprise/issues/10014)
- Fix JWT per-policy provider name. Currently it's using the route-name, but this was causing very high numbers of providers, and therefore very large amounts of requests to the JWKS backend. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11368)
- The Rate Limit Policy details page will display an error if the policy references an invalid RateLimitServerConfig. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8453)
- Fix an issue where invalid PeerAuthentication resources would be created when applying service isolation to a workspace. This was caused by a bug in the translation logic when processing Kubernetes Services that don't contain selectors. Now, these invalid resources will not be created. Users should configure an explicit AccessPolicy that selects this type of Service instead. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8833)
- Fix an issue where invalid PeerAuthentication resources would be created when an AccessPolicy applyToDestinations selector will select a Kubernetes Service that doesn't contain any labels. This was caused by a bug in the translation logic that did not properly account this use case. Now, a warning on the AccessPolicy resource will be shown when this occurs, and the invalid PeerAuthentication resource will not be created. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8833)
- "Outlier detection policy applied to an external service has an effect now." (https://github.com/solo-io/gloo-mesh-enterprise/issues/6119)
- Updated the "see the docs" links in the "Creating a workspace" modal on the overview page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8072)
- The `glooUi.auth.oidc.clientSecret` helm value is no longer required when setting up OIDC. Allow users to reference an existing OIDC secret with `glooUi.auth.oidc.clientSecretName`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11125)
Helm Changes
- Add ipVersion parameter to glooUi helm chart, allowing control over IPV4, IPV6 or dual stack operation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10893)
- Use a `lookup` command to look for existing Gloo UI OIDC secrets in the cluster. As a result, commands like `helm generate` will no longer work with the ui-auth.yaml template. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11125)

v2.3.15 (v2.3.0)

Thu, 24 Aug 2023 22:15:20 GMT

Dependency Bumps
- solo-io/skv2-enterprise has been upgraded to v0.29.13-gp.
Fixes
- Downgrade the warning message from a Dpanic to a WARN when redis sync falls behind and needs to do a readAll. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10919)
- Configure mgmt server and agent readinessProbe port through helm (https://github.com/solo-io/gloo-mesh-enterprise/issues/11314)
- Handle readiness check when multiple agents are running (https://github.com/solo-io/gloo-mesh-enterprise/issues/11302)
- Fix agent not receiving updates from k8s services until pod restart (https://github.com/solo-io/gloo-mesh-enterprise/issues/11370)
- Remove the generationchanged predicate from the generic cache reconciler to allow status updates to flow as the UI expects. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11421)
- Propagate clusterDomain from KubernetesCluster to IstioOperator values when using IstioLifecycleManager. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6478)
- Dynamically update selected namespaces list that the `EXPERIMENTAL_WATCH_NAMESPACES_SELECTOR` env selects with k8s set based requirements. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10325)
- Added missing fields on access policy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10970)
- Fixes error when fetching Virtual Gateway. (https://github.com/solo-io/gloo-mesh-enterprise/issues/11284)
- Adding support for TCP and TLS routes in UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8523)
- Workspace lists no longer capitalize first letter. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8461)

v2.3.14 (v2.3.0)

Thu, 17 Aug 2023 00:05:32 GMT

v2.3.13 (v2.3.0)

Mon, 14 Aug 2023 12:17:48 GMT

v2.3.12 (v2.3.0)

Tue, 08 Aug 2023 19:40:59 GMT

Fixes
- Fix bug in cross cluster routing when using the same subset in multiple routes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10358)
- Fixes an issue where all agent replicas would attempt to discover openAPI specs and upsert apidocs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10908)
- The UI no longer shows duplicate entries on its list of APIs or its list of RouteTables on policy pages. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7304)
- Populate Status for the GraphQLAllowedQueryPolicy and GraphQLPersistedQueryCachePolicy resources. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7606)
- "Allow disabling telemetryCollector and legacy metrics pipeline in Helm" (https://github.com/solo-io/gloo-mesh-enterprise/issues/9859)
- Add label selector option `EXPERIMENTAL_WATCH_NAMESPACE_SELECTOR` to experimental features to filter triggers for mgmt server. The env value is used to limit the namespaces that will be considered for discovery in the cluster where the server is running. The value of the env is a label selector expression in the same form as the k8s set based requirements: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#set-based-requirement. The current limitation with this feature is that the selectors will be statically evaluated only once during startup so any relevant updates to the selectors or namespaces will still require the mgmt server to restart to update the filtered namespaces. This pr also fixes sort in the discovered mesh to avoid triggering extraneous reconciles. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10325)
- Do not recall base64 encode on identity token, was causing it to grow indefinitely. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10818)
- UI now informers users when they have no valid licenses. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10805)
- Broken links with undefined workspace fixed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10696)

v2.3.11 (v2.3.0)

Tue, 01 Aug 2023 01:43:53 GMT

Dependency Bumps
- solo-io/licensing has been upgraded to v0.4.0.
- docker/distribution has been upgraded to v2.8.2.
- deislabs/oras has been upgraded to v0.11.1.
- opencontainers/runc has been upgraded to v1.1.8.
- cilium/cilium has been upgraded to v1.12.10.
- moby / docker/moby / docker has been upgraded to v20.10.25.
Fixes
- Disable ingestion of high cardinality metrics from gloo-mesh namespace in (https://github.com/solo-io/gloo-mesh-enterprise/issues/5949)
- Fixes an issue where access to usage plans are not checked if the visibility of the developer portal is set to public. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10403)
- Debug page filters now split into 4 different categories. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10538)
- Fixed a broken link on OpenAPI destinations table. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9880)
- Fixed issue with workspaces being undefined on some route forwards.
- Improve UX around empty or pending statuses in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10531)

v2.3.10 (v2.3.0)

Fri, 21 Jul 2023 15:52:53 GMT

Fixes
- "Support multiple replicas of ext-auth-service" (https://github.com/solo-io/gloo-mesh-enterprise/issues/7432)
- Fix an issue when upgrading from a 2.2+ version of Gloo Platform to a 2.3+ version when the glooAgent.istiodSidecar.createRoleBinding value has been enabled. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10176)
Helm Changes
- Fix helm chart to account for existing license keys with the name `license-keys`. A helm upgrade will only write out a secret for a license keys if:
- Rename the istiod-agent ClusterRoleBinding manifest to avoid conflicts with the legacy agent helm chart. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10176)

v2.3.9 (v2.3.0)

Thu, 13 Jul 2023 20:40:30 GMT

Fixes
- add a rw mutex to subset struct to prevent data race (https://github.com/solo-io/gloo-mesh-enterprise/issues/10374)

v2.3.8 (v2.3.0)

Wed, 12 Jul 2023 15:01:25 GMT

Fixes
- Add cluster to subset object to properly track subsets location. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10291)
- Subsets were not correctly discoverd with scoped workspaces. This has been fixed by switching to the context of the remote services, which may be imported from other workspaces, when discovering remote subsets.
- "Optimize apiserver debug handler calls for use cases with a large number of workspacees" (https://github.com/solo-io/gloo-mesh-enterprise/issues/10322)

v2.3.7 (v2.3.0)

Thu, 06 Jul 2023 22:13:34 GMT

Fixes
- Improve page load times in the UI in environments with a large number of resources. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10160)
- Fix an issue where the Envoy route cache was always being cleared when configuring JWT authorization rules for gateway routes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/10125)
- Add support for resource-based, cross-account lambda invoke. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8868)
- "Use CR statuses in the apiserver to filter for healthy and unhealthy resources, to improve performance." (https://github.com/solo-io/gloo-mesh-enterprise/issues/10175)
- "Show default destinations properly in the Gloo UI Route Table details." (https://github.com/solo-io/gloo-mesh-enterprise/issues/10222)

v2.3.6 (v2.3.0)

Tue, 27 Jun 2023 20:31:02 GMT

Fixes
- Fix an issue where the console pod in the gloo-mesh-ui would not pass readiness checks in ipv6 cluster. (https://github.com/solo-io/gloo-mesh-enterprise/issues/721)
- Destination counts in the Workspace overview section of the UI will now match the number of destinations those workspaces contain. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9183)
- Report an error in the status when a RouteTable is not allowed by the VirtualGateway it selects. Also, fix a bug where the NumParentRouteTables field on the RouteTableStatus was not being set correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8739)
- Trim Proxy Config policy details page added. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7091)
- "Quality of life improvements on the Debug page. Remove confusing 'limited functionality' banner, and return all resources in the snapshot." (https://github.com/solo-io/gloo-mesh-enterprise/issues/7553)
- "Improve YAML output in the UI to remove information from the managedFields field." (https://github.com/solo-io/gloo-mesh-enterprise/issues/7553)

v2.3.5 (v2.3.0)

Tue, 06 Jun 2023 23:02:24 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.29.10.
- solo-io/ext-auth-service has been upgraded to v0.35.6.
- solo-io/rate-limiter has been upgraded to v0.8.6.
Fixes
- Subset labels are now determined by pod template labels instead of workload labels. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7946)
- Updates the portal server auth middleware to parse claims from JWT Authorization access tokens. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9233)
Helm Changes
- Allow to define custom annotation for ext-auth-service and rate-limiter deployment service. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9345)

v2.3.4 (v2.3.0)

Tue, 30 May 2023 15:45:17 GMT

Dependency Bumps
- solo-io/rate-limiter has been upgraded to v0.8.5.
- alpine/alpine has been upgraded to v3.18.0.
Fixes
- Add support for configuring JWT claim-based authorization rules for individual gateway routes. Previously, users needed to specify which claims need to be extract using the claimsToHeaders field, and then perform any JWT authorization by defining OPA rules. Now, the JWTPolicy API has been updated to allow users to configure JWT authentication and authorization policy within a single API. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6365)
- Users can now set clear_route_cache for JWTPolicy providers. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9231)
- Fixes bug where gloo-mesh-ui pod does not become ready in ipv4 only cluster. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9540)
- Bump skv2 to v0.29.7 to support helm extra environment variables. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7143)
- Allow the ability to turn off relationship tracking via EXPERIMENTAL_DISABLE_RELATIONSHIP_WRITES env var. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9354)
Helm Changes
- Use alpine redis for better CVE coverage. (https://github.com/solo-io/rate-limiter/issues/176)

v2.3.3 (v2.3.0)

Wed, 17 May 2023 22:23:36 GMT

Fixes
- Fix issues starting gloo-mesh-ui in ipv6 environment. (https://github.com/solo-io/gloo-mesh-enterprise/issues/721)
- Fix an issue where a JWTPolicy that configures an empty JWT providers map would translate an invalid JWT listener filter. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9025)
- Add support for applying multiple JWTPolicy resources to a single gateway. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7573)
- Fix an issue where a VirtualDestination is exported to workspaces with a resource selector, the translated ServiceEntry ignores the selector so it would be exported to all the namespaces in the workspace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8588)
- Pass host protocols from the route table translator to the route table plugin so that the portal plugin can correctly build the full URL for the routes exposed on the portal. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8941)
- Fix portal stitched schema not building the server correctly in a delegated route table scenario. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9494)
- Graph fetch settings no longer get messed up when setting a traffic range. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9184)
Helm Changes
- Provide helm flag to use where optional IstioOperator CRD install was not functioning for terraform managed helm. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9520)
- Fix string wrapping in generated yaml, it can cause issues for certain software. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9516)

v2.3.2 (v2.3.0)

Tue, 09 May 2023 21:19:13 GMT

Fixes
- Stop JWT policy being erroneously applied to sidecars. This policy will is only supported on North-South gateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7873)
- Wrong destination workload id labels with lambda (or any external) destination service caused the graph to miss destination nodes. This fixes the labels setting so that the destination lambda service will reappear. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8248)
- Fixes an issue where where the openAPI path did not match the path configured in the route table. openAPI path now matches the configured path in the route table with any path rewrite portion removed if it is set. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8621)
- Fixes an issue where where the server definitions in the openAPI spec were not populated if the route table being processed is a child route table and host definitions are defined in the parent route table. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8813)
- Only trigger status calculations for objects that have changes in their reportsets. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8781)
- Add route tracking to the HTTPBufferPolicy status (https://github.com/solo-io/gloo-mesh-enterprise/issues/8538)
- To avoid confusion about an unsecure state vs uncertainty, labels about mtls not being applied have been removed from the graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9018)
- "Enforce that only a single extauth or waf policy filters are ever created per listener. The first policy applied will be taken and the rest rejected." (https://github.com/solo-io/gloo-mesh-enterprise/issues/9035, https://github.com/solo-io/gloo-mesh-enterprise/issues/6591)
- Add status plugin for ApiDoc (https://github.com/solo-io/gloo-mesh-enterprise/issues/8203)
- Add status plugin for DLPPolicy (https://github.com/solo-io/gloo-mesh-enterprise/issues/8707)
- Add status plugin for DiscoveredGateway (https://github.com/solo-io/gloo-mesh-enterprise/issues/8708)
- Fixes an issue the too many request, unauthorized and forbidden responses were not added to the responses for a openapi path that had a usage plan applied (https://github.com/solo-io/gloo-mesh-enterprise/issues/8947)
- Fixes an issue where the api key header was not included in the security scheme for an openapi path that had a usage plan applied. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8814)
- Graph container label colors tweaked for readability when unselected. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9295)
- Fixes bug where agent would not warm mid minor upgrade due to unrecognized CRDs from the mgmt cluster (https://github.com/solo-io/gloo-mesh-enterprise/issues/6938)

v2.3.1 (v2.3.0)

Thu, 27 Apr 2023 20:03:58 GMT

Fixes
- Fix an issue with a JWTPolicy resource that configures multiple JWT providers that share the same claimsToHeaders claim key, but different header values. Previously, there was no logic that mapped an individual JWT providers to it's claimsToHeaders configuration, which resulted in all the claimsToHeaders configurations being merged together for a single route. This meant that an authenticated request would contain all the extracted header values for a shared claim key. Now, there's logic that maps a JWT provider to it's claimsToHeaders configuration, and an authenticated request will only contain the desired claimsToHeaders configuration. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7921)
- Add status plugin for the CloudProvider API. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8207)
- Add status plugin for WaypointLifecycleManager. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8209)
- Add new status plugin for WAFPolicy resource. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8706)
- Add new status plugin for RateLimitServerConfig resource. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8711)
- Fix an issue where the JWTPolicy translator plugin was always setting the Envoy JWT per-route "clearRouteCache" filter field to true. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8877)
- Licenses failing to load no longer results in blank content area. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8786)
- Documentation link on top bar now links to version-specific link instead of always to latest. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8818)
- Virtual gateway listeners route table now correctly list their workspace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8586)
Helm Changes
- Avoid nil error by ensuring that annotations exist on the CRD. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8981)
- Sign our container images and helm charts. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3371)

v2.3.0 (v2.3.0)

Mon, 17 Apr 2023 18:33:15 GMT

Fixes
- Add a tiebreaker case if input resource creation time between objects is equal, which is needed when several of the same type of resources are created at the same time. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8703)
- Use asnyc queue instead of a blocking channel to fire status reconciler. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8781)
- Adds WorkspaceReport field documentation (https://github.com/solo-io/gloo-mesh-enterprise/issues/8794)
- Remove IstioOperator from TranslatorInputSnapshot and ApiserverInputSnapshot. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8338)

v2.3.0-rc2 (v2.3.0)

Thu, 13 Apr 2023 23:09:26 GMT

Dependency Bumps
- graphql-go/graphql has been upgraded to v0.8.1.
Fixes
- All the Gloo Platform components now output log timestamps in ISO8601 format by default. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6395)
- Since CloudProviders are no longer used in workspaces, we can remove from the WorkspaceSettings export. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8046)
- Uses new Status for RateLimitClientConfig (https://github.com/solo-io/gloo-mesh-enterprise/issues/8196)
- Add status plugin for PortalConfig (https://github.com/solo-io/gloo-mesh-enterprise/issues/8206)
- Remove the CloudResourcesStatus fields from the CloudResource API. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8208)
- Viewing an AccessLogPolicy in the dashboard UI will no longer 403. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8605)
- Fixes an issue with the helm installation for the portal server where the secret is created in the wrong namespace (https://github.com/solo-io/gloo-mesh-enterprise/issues/8643)
- Fixes an issue where the rate limit client config selection logic in the portal plugin was inverted. Also fixes an issue where not defining the `privateAPILabels` in the `Portal` CR would accidentally result in all APIs being considered private. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8512)
- Remove login & logout endpoints from the OpenAPI spec for the Portal API. Also removed the corresponding endpoints from the handler code and update the `identityToken` in the openapi spec for the Portal API with the correct cookie name. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8665)
- Fixed a bug where the portal server was not storing the API key with the correct metadata resulting in dynamic metadata not being properly extracted and propagated upstream from the ext-auth-server. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8695)
- Add status plugin for the ProxyProtocolPolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8195)
- Add status plugin for the ClientTLSPolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8569)
- Add status plugin for the Kubernetes Service. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8201)
- Fix issues with admin reports in multi-management server setup (https://github.com/solo-io/gloo-mesh-enterprise/issues/8575)
- Fix missing report GVK for service and workload (https://github.com/solo-io/gloo-mesh-enterprise/issues/8646)
Helm Changes
- Only applying the IstioOperator crd if it doesn't exist, or it exists and is owned by the helm release. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8310)
New Features
- Add status plugin for PortalGroup (https://github.com/solo-io/gloo-mesh-enterprise/issues/8205)
- Add the GraphQLResolverMap status plugin. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8176)
- Add the GraphQLStitchedSchema status plugin. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8177)
- Add the GraphQLSchema status plugin. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8200)

v2.3.0-rc1 (v2.3.0)

Thu, 06 Apr 2023 01:40:34 GMT

Dependency Bumps
- containerd/containerd has been upgraded to v1.6.18.
- solo-io/rate-limiter has been upgraded to v0.8.0.
- solo-io/ext-auth-service has been upgraded to v0.35.1.
- solo-io/ext-auth-service has been upgraded to v0.35.2.
Fixes
- Fix issue which caused the revision to be duplicated in the name. Fix issue which caused service annotations to not get set when using the default service. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8524)
- Fixed an issue where management server would log the error message 'name
- fixes issue where portal would not install in agent successfully if apkKeyStorage value was not passed to helm. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8544)
- corrects the handling of non-string type variables passed to meshctl install using --set argument (https://github.com/solo-io/gloo-mesh-enterprise/issues/8567)
- Fix bugs with status not being set properly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8479)
- Fix race condition in soak test from diff updates in report reader. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8534)
- Removes deprecated RouteLabelSelector name field in our API (https://github.com/solo-io/gloo-mesh-enterprise/issues/7446)
Helm Changes
- Auto create addon namespace for demo profile. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8447)
New Features
- Add status plugin for the HTTPBuffer policy (https://github.com/solo-io/gloo-mesh-enterprise/issues/8199)
- Add status plugin for the ExternalService API. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8179)
- Add status plugin for the ConnectionPolicy API. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8184)
- Add status plugin for the MirrorPolicy API. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8194)
- Add status plugin for AccessLogPolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8183)
- Add status plugin for WasmDeploymentPolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8182)
- Add status plugin for TrimProxyConfigPolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8137)
- Add status plugin for K8SWorkload. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8201)

v2.3.0-beta4 (v2.3.0)

Tue, 04 Apr 2023 08:13:19 GMT

Dependency Bumps
- solo-io/solo-kit has been upgraded to v0.29.3.
Fixes
- Remove license flag from meshctl install command, and check that license is provided as a helm value instead. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5091)
- Handle issue where profile incorrectly enables features on ILM and GLM. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6473)
- Change the way EnvoyFilters are created per gateway to avoid etcd size limits. Now EnvoyFilters are created per matcher, rather than per gateway. This means that if you have 10 routes on a gateway, you will have 10 EnvoyFilters rather than 1. This should have no affect on routing, other than allowing for more routes to be created for a single gateway/workload. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7169)
- Management server will now request 1GB of memory by default. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8055)
- Restore status information for policies missing statuses in the dashboard UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8408)
- Allow users to provide only trial licenses. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8433)
- Fix the release process to build otel collector and gateway images for arm correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8125)
- Fix metrics collector template to work with revisioned Istio installs (https://github.com/solo-io/gloo-mesh-enterprise/issues/8023)
- Fix garbage collection of east west gateway resources to avoid cross context writes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7378)
- Fix subset caching bug to cleanup old destination rules. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7945)
- Fix issue with statuses being incorrectly reduced across multiple workspaces. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8451)
- Fixed UI policy issue in routes list on policy pages. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6590)
Helm Changes
- Currently, if you try to install gloo-platform on a cluster that already has istio installed, it will fail because helm tries to apply a crd that already exists. Fix this by only applying the IstioOperator crd if it doesn't exist. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8310)
New Features
- Enable support for using a redis instance not provided by the gloo platform. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6255)
- Adds a new field to the route table proto to support adding custom metadata to the portal associated with the route table. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6871)
- Update API -- BREAKING CHANGE. Moves CloudProviders/CloudResources to infrastructure api group, and makes several quality of life improvements to the way RouteTables reference these resources. For instance, we are no longer including the `CLOUD_PROVIDER` DestinationKind, and are instead creating different Objects from which the RouteTable can select -- a generic ObjectReference (where the DestinationKind is still used) or a AWS Lambda function. We are also removing the idea of a logical name from the CloudResources object. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8046)
- Add status plugin for the ExternalEndpoint API. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8178)
- Add status plugin for JWT Policy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8191)
- Add status plugin for corspolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8188)
- Add status plugin for csrfpolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8189)
- Add status plugin for faultinjectionpolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8186)
- Add status plugin for extauthpolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8190)
- Add support for "eas" as a shortName for ExtAuthServer resource (https://github.com/solo-io/gloo-mesh-enterprise/issues/8463)
- Add profile support to meshctl. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6649)
- Add status plugin for ratelimitpolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8197)
- Add status plugin for retrytimeoutpolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8192)
- Add status plugin for outlierdetectionpolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8187)
- Open up new gateway for TCP connections. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1035)
- Added DLP policy details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7990)
- Adds table views to landing pages and a button to toggle between grid and table view. Also includes some landing pages refactoring. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8370)
- YAML only version of meshctl migrate that does not require helm releases to function, mostly for argo use-case. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7867)

v2.3.0-beta3 (v2.3.0)

Wed, 29 Mar 2023 03:11:27 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.29.1.
- solo-io/skv2 has been upgraded to v0.29.2.
Fixes
- Add read-only-generated-resources option for gloo-mesh-ui. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7711)
- Access policy should create authn with STRICT mTLS if service isolation is enabled (https://github.com/solo-io/gloo-mesh-enterprise/issues/8024)
- Fix an issue with any JWTPolicy resource that specify multiple providers. Previously, an affected JWTPolicy resource's status would incorrectly change between the FAILED and ACCEPTED states between reconciliation attempts due to an idempotency bug. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8059)
- Stop stripping binaries of symbols to help confirm FIPS builds. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8102)
- Remove AWS Lambda destinations and pages from the dashboard UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8252)
- DLP actions will be applied in order of policy timestamps (https://github.com/solo-io/gloo-mesh-enterprise/issues/8260)
- fixes issue where predefined action ALL_CREDIT_CARDS would match characters adjacent to credit card numbers (https://github.com/solo-io/gloo-mesh-enterprise/issues/8261)
- Updates the apiserver graphql explorer settings handler to find the api's virtual gateway using the cluster snapshot instead of the workspace snapshot. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8084)
- Fixes race b/t mgmt server goroutines that would sometimes cause agent to restart (and thus brief control plane downtime) on mgmt server start-up. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8092)
- Fix bug where empty table would print. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8100)
- In several Policy CRDs, an object reference may not have a filled out namespace or cluster because it assumes the namespace or cluster of its parent object. This causes several UI display issues, which have now been fixed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7957)
- Use last_over_time in a prometheus query to show mTLS info in the Graph UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7700)
- Remove the use of the LOG_LEVEL env var in the gloo-mesh-ui deployment and gloo-mesh-ui container. Users should instead set --verbose=true in order to get debug logging. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7920#issuecomment-1456925072)
- Set the log level of the gloo-mesh-ui to 'info' by default. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7920#issuecomment-1456925072)
- Upgrade Golang to 1.19.7 for CVEs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7632)
- OpenAPI schema deeplink behavior added. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7944)
- Policy types without detail pages are no longer linkable. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5855)
- \'Workspaces Importing this Route Table\' changed to reflect the current resource. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8240)
Helm Changes
- The `Values.verbose` or `Values.common.verbose` helm value will now correctly modify the log level verbosity of the gloo-mesh-ui pod. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7920#issuecomment-1456925072)
- Simplify need for REPO_KEY when using default meshctl & helm installs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6652)
- Restructure redis API in helm to better support external connection config. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8115)
- Rename helm components in gloo-platform chart. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8229)
- Rename the metrics pipeline to telemetry pipeline. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7757)
New Features
- Adds in installation status to the istio cluster details and a storybook to show what that looks like. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4264)
- Adds Data Loss Prevention (DLP). (https://github.com/solo-io/envoy-gloo/issues/534)
- Enable HTTPBuffer policy details page (https://github.com/solo-io/gloo-mesh-enterprise/issues/6527)
- Enable ClientTLS policy details page (https://github.com/solo-io/gloo-mesh-enterprise/issues/6266)
- Adds support for TLS routes in route tables. The main use case is TLS passthrough SNI routing. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6971)
- Add `HTTPSettings` to `ConnectionPolicy` resource. The new fields can be used to configure the connection pool for HTTP1.1/HTTP2/GRPC connections to an upstream host (i.e. a routing destination). (https://github.com/solo-io/gloo-mesh-enterprise/issues/7175)
- Add credential reloading for Management Servers TLS Certificate (https://github.com/solo-io/gloo-mesh-enterprise/issues/7869)
- Add plugin for kubernetescluster resource. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8174)
- Add status plugin for workspacesettings. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8175)
- Add new status plugin for portal resource. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8204)
- Adds optional `enforcementLevels` field to `AccessPolicy` and `serviceIsolation` to give users granular control over how these security features are enforced. This feature requires a Gloo Network license to work correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4112)
- HTTP Settings added to connection policy apiserver/UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7899)
- Add status plugin for failover policy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8185)
- Meshctl Helm Profiles (https://github.com/solo-io/gloo-mesh-enterprise/issues/6650)
- If revision is specified as "auto" initial installation will use latest istio version. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8068)
- Use new platform chart in meshctl. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7852)
- Add status plugin for virtualdestination. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8180)
- Add status plugin for headermanipulationpolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8193)
- Add status plugin for transformationpolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8198)
- Add new status reconciler to handle statuses for Workspaces, AccessPolicies, and RouteTables. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6337)
- Added Calico version info to the overview apiserver handler and UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8228)
- Adds a portal listing/landing page to the UI, and a listOverviewPortals handler to the apiserver. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8017)
- Adds a sidebar link to the UI to access the portal listing/landing page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8014)
- Adds stitched GraphQL support to the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7740)
- Portal details page added. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7525)
- Add status plugin for virtualgateway resource. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8181)

v2.3.0-beta2 (v2.3.0)

Thu, 09 Mar 2023 19:22:34 GMT

Dependency Bumps
- solo-io/ext-auth-service has been upgraded to v0.31.0.
- onsi/ginkgo has been upgraded to v2.8.4.
- solo-io/licensing has been upgraded to v0.3.13.
- solo-io/solo-apis has been upgraded to gloo-v1.14.0-beta15.
Fixes
- Adjust status update logging to produce warnings for "not found" resource errors (https://github.com/solo-io/gloo-mesh-enterprise/issues/3817)
- Add pathRewrite support for routetables routing to lambda destinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6498)
- Fixed a bug that affected port matching for custom east-west gateway selectors on `WorkspaceSettings`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6674)
- Fixed an issue where DestinationRules for k8s-service based subsets were being created in destination namespace but not client namespace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7499)
- Accept glooTrialLicenseKey if provided (https://github.com/solo-io/gloo-mesh-enterprise/issues/7613)
- Fix allowedRoutes such that delegate action allowedRoutes configuration does not transfer between routes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7651)
- Remove `UNRECOGNIZED_WORKLOAD` from `WorkloadKind` enum, and set `DEPLOYMENT` as the default value. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7671)
- Destination tables on policy detail pages should now properly display their names. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7840)
- Fix CrashLoopBackOff of mgmt server due to slice index out of range (https://github.com/solo-io/gloo-mesh-enterprise/issues/7905)
- Add context to metrics when routing to Lambda backends, such that we are able to utilize that information to show traffic being routed to it in the Gloo Mesh graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6111)
- Adds a new helm flag which allows users to filter out the Istio resources that Gloo Mesh Enterprise watches.
- Fix issue where ClientTLSPolicy was not being relayed correctly (https://github.com/solo-io/gloo-mesh-enterprise/issues/7936)
- Add fix to transformation plugin such that subsequent objects in the tctx do not inherit the intermediate transformation configs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7150)
- Fix the warning in the Gloo Mesh UI Overview page when it's unable to connect to prometheus (https://github.com/solo-io/gloo-mesh-enterprise/issues/7844)
- Fix logic to get the set of common labels for the pod selectors on all the given backing services of a virtual destination (https://github.com/solo-io/gloo-mesh-enterprise/issues/7801)
- Ensure that reconciled service accounts include existing token secrets (https://github.com/solo-io/gloo-mesh-enterprise/issues/6235)
- Api icon on overview page now matches sidebar icon. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7717)
- Updates the GraphQL naming scheme in the apiserver and UI, so Local->Resolved, and Server->Proxied. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7748)
- Renames the route_name to istio_route_name in the GraphqlApiDetails apiserver handler and UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7736)
- Error count on overview page no longer shows as red when the count is 0. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7743)
Helm Changes
- New monolith gloo-platform chart. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6923)
- Seperate charts for the Gloo Mesh CRDs installed as templates. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7476)
- Make ExtAuth & RateLimiter install by default for stand-alone Gloo Gateway install & use addon namespace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6634)
- When running a standalone gateway, add ability to install a default workspace & workspace settings. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6645)
- Add missing and update existing Helm field descriptions. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7572)
- Make portal feature opt-in. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7603)
New Features
- Add feature flag controlling Gloo Network AccessPolicy translation. This feature is now disabled by default. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6041)
- Add support for accessing API key metadata in other ExtAuthPolicy modules. This allows users to define OPA rules that access the extra metadata attached to an authenticated API key to perform further authorization checks. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6308)
- Add WRAP_AS_API_GATEWAY as option for routing to Lambda backend. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6457)
- Added the `tlsTerminationPort` field to the east-west gateway selectors on the `WorkspaceSettings` resource. The new field can be used to choose which gateway port should be used when `clientMode` is set to `tlsTermination`. Previously the system would always look for ports named "https" to that end. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6674)
- Add support for trimming out all sidecar proxy destinations in Workspace settings (https://github.com/solo-io/gloo-mesh-enterprise/issues/6804)
- Support declarative Root Certificate rotation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6995)
- Allow filtering of routes at the virtual gateway level with the new `allowedRoutes` specified on the virtual gateway. This field represents an OR of different `RouteFilters` that are tied directly with the associated `RouteTableFilter`. Only when a route table matches the `RouteTableFilter` will we then also check that the `RouteFilter` should apply. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7150)
- Add check ensuring that CRD version matches the gloo mesh management server or agent deployment version. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7228)
- Reload metrics gateway certs when they are rotated by specifying the interval in `metricsgatewayCustomization.reloadTlsCertificate` (https://github.com/solo-io/gloo-mesh-enterprise/issues/7306)
- GraphQL introspection requests can now be allowed through the proxy to the proxied GraphQL server. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7372)
- GraphQL introspection can now be configured to be enabled or disabled on stitched schemas. By default, introspection is disabled on stitched schemas. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7709)
- Add meshctl proxy command as a utility for port-forwarding to Gloo Platform components. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7455)
- Improve meshctl deployments check. Check addon deployments and deployed daemonsets. Output results in table. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7456)
- Add meshctl logs command. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7457)
- Add K8s NetworkPolicy support to Gloo Network for defense-in-depth with Calico (https://github.com/solo-io/gloo-mesh-enterprise/issues/5497)
- Adds support for TCP routes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5753)
- Adds a "Tracing" tab to the UI, with it hidden by default. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7672)
- View Schema button added to Kubernetes destination page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7526)
- OpenAPI supported added to Route Table lists / details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7527)
- This lists the allowed gateway options for the associated route table of a GraphQL API on the API explorer page. Each gateway's ingress URL, or a custom endpoint URL can be selected, for the user to explore their API through. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5364)
- This updates the UI to show information about GraphQL gRPC resolvers. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6974)
- Schema section added for OpenAPI details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7524)
- Details page for OpenAPI added. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7524)
- YAML modal content now resizes to fit screen. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1057)

v2.3.0-beta1 (v2.3.0)

Tue, 14 Feb 2023 14:42:13 GMT

Breaking Changes
- Change transformations field to enum, to better represent the options for transformation and to allow for better extensibility and code. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7357)
Dependency Bumps
- solo-io/k8s-utils has been upgraded to v0.2.0.
- solo-io/external-apis has been upgraded to v0.1.17.
- solo-io/go-utils has been upgraded to v0.22.4.
- solo-io/protoc-gen-ext has been upgraded to v0.0.18.
- solo-io/skv2 has been upgraded to v0.27.0.
- solo-io/ext-auth-service has been upgraded to v0.29.4.
- solo-io/rate-limiter has been upgraded to v0.7.6.
- solo-io/ext-auth-service has been upgraded to v0.29.3.
- solo-io/go-utils has been upgraded to v0.23.0.
- solo-io/licensing has been upgraded to v0.3.12.
- grpc/grpc-web has been upgraded to 1.4.2.
Fixes
- Remove erroneous flag from meshctl deregister. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1795)
- Shows the user what Graphql APIs are available. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4125)
- Improved error handling when a RouteTable attempts to delegate to other RouteTables, but these delegatee RouteTables cannot be found. Prior to this change, this could result in an attempt to create an invalid Istio VirtualService, which would be rejected by Istio's admission webhook, and would cause unnecessary noise in the server logs. The management server is now able to detect these errors and instead report an informative warning on the RouteTable status. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4290)
- Connection policy details page hooked up to api. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4809)
- Fixes bug with discovering gateways. Where previously a services selector had to exactly match the deployment labels for it to be considered a discovered gateway, we now allow the services selector to match on a subset of the deployment labels. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4943)
- Fixes k8s 1.25 compatibility issue, where metadata.ClusterName field is deprecated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5158)
- Fix an issue where translated Istio resources weren't properly garbage
- Guarantees generated root certs are generated only once upon creation of policy (https://github.com/solo-io/gloo-mesh-enterprise/issues/5691)
- compression no longer works on macOS Ventura due to https://github.com/upx/upx/issues/612 (https://github.com/solo-io/gloo-mesh-enterprise/issues/5844)
- Fixes problems with the applyToRoute selection process not working for non-label fields. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5955)
- Add update event on CloudProvider deletion to ensure GC. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5989)
- Fixes an issue the HTTP method configured on a delegated RouteTable resource was not chosen when the parent RouteTable's HTTP method was undefined. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6096)
- The default refresh rate for the UI graph has been made 1 minute rather than 5 seconds. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6135)
- Enables support for using CIDRs as ExternalService addresses. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6143)
- Allows a toggle between YAML as a list vs. as a table. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6163)
- The dropdown of license information in the UI now hints to expiration concerns without clicking in. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6234)
- Ensures AuthorizationPolicy reflects restrictive WorkspaceSettings spec (https://github.com/solo-io/gloo-mesh-enterprise/issues/6250)
- Fixes a problem where intermediate certs are regenerated upon during upgrade (https://github.com/solo-io/gloo-mesh-enterprise/issues/5302)
- Improves reliability and awareness of Istio cacerts by the management server (https://github.com/solo-io/gloo-mesh-enterprise/issues/5693)
- Fixes a problem where Istio cacerts are deleted when Root Trust Policy is updated (https://github.com/solo-io/gloo-mesh-enterprise/issues/5606)
- Adds in the Client TLS Policy Details Page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6266)
- Adds in the Http Buffer Policy Details Page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6527)
- Enforce max length of 63 characters for workspace names. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6347)
- Fixes bug with rate limit policies where the rate limit would be duplicated when a route table binds to multiple listeners on a virtual gateway. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6377)
- Rotate intermediate certificates (https://github.com/solo-io/gloo-mesh-enterprise/issues/6429)
- No longer allows a conflicting lifecycle manager to install istio operators that conflict with those which are currently being garbage collected. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6465)
- Fix the connection plugin exiting early when more than one connection policy is applied. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6476)
- Make transformations apply in addition to the default transformations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6514)
- Fix for generated ServiceEntries when using Federation (https://github.com/solo-io/gloo-mesh-enterprise/issues/6744)
- Fix: Format valid domain when using CIDR in ExternalService addresses (https://github.com/solo-io/gloo-mesh-enterprise/issues/6826)
- Fix for gracefully handling missing GVKs in runtime's scheme. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6827)
- Rename APISchema to APIDoc. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6386)
- Change input snapshot so translation times when "nothing selected" status is applied doesn't spin forever. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6977)
- Adds ExternalService addresses to Sidecar egress (https://github.com/solo-io/gloo-mesh-enterprise/issues/6984)
- Allow Istio Lifecycle Manager to accept 'ambient' profile (https://github.com/solo-io/gloo-mesh-enterprise/issues/7052)
- Enables customization of otel collector telemetries (metrics and logs) (https://github.com/solo-io/gloo-mesh-enterprise/issues/7055)
- Filtering out all the metrics not needed for the UI to work in the Minimum Metrics Set's processor. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7102)
- Fix cert rotation issues with RootTrustPolicy that uses Vault CA. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7161)
- Update icons for the debug toggle between table and list. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7203)
- Fix issue where reconciler was hotlooping due to bug in garbage collection
- Fix logging for generated certs when reading cert data from Kubernetes results in an error. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7370)
- Fixes garbage collection deletion due to names being too long. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7468)
- Deduplicate the list of hosts shown in the Virtual Gateway list in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6241)
- Fix the broken link in the UI from a route to a Virtual Destination. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6157)
- Fix the graph UI when there are nodes returned with no http, tcp, or cilium metrics. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6280)
- Transformation policy details now displays information from the API. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5430)
- Added experimental configuration option to move status syncing out of core reconciliation loop to avoid blocking for long periods of time. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7327)
- Fixes a bug where an AccessPolicy specifying only non-existent sources would result in allowing any source until the warning was addressed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6123)
- Fix issues with OIDC token expiring when used with JWTPolicy (https://github.com/solo-io/gloo-mesh-enterprise/issues/5389)
- Ensure the ordering of in which the routes have policies applied to them is deterministic. This ensures that if/when an error occurs it will always apply to the same route. Also, ensure that we track envoy filter uniqueness across ports, rather than treating them as equal. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6035)
- Restrict agent's ability to delete k8s secrets to prevent issues with Certs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5302)
- Fixes conflicts in the EnvoyFilter name when federation is enabled on the same services as the VirtualDestination's backing services. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7254)
- Fixes cross cluster federation by replacing conflicting DestinationRule with EnvoyFilter to force traffic local. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5769)
- Outlier detection fixed when applied to VirtualDestinations by removing conflicting DestinationRule. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6276)
- ExternalEndpoint locality with VirtualDestination fixed by removing conflicting DestinationRule. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6216)
- Fix the license validation logic to treat expired licenses correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7461)
- Reverts requirement that Gateways and Envoyfilters are only translated in Gateway workspace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7184)
- Show linked VirtualGateway in the RouteTable Details UI page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5714)
- Show linked RouteTable in the VirtualGateway Details UI page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3948)
- Fixes virtual destination subset routing by adding subsets to EnvoyFilter sni match to prevent hairpins and fix subset DestinationRule translation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5895)
- Fixes hairpins when using virtual destination host from a client without subsets. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5895)
- Listing of timings has been flipped in the graph settings. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7433)
- Fixes meshctl register in case where target is a management cluster and case where remote cluster relay root CA needs to be replaced. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6720)
- Added support to UI for OpenAPI api entries. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6175)
- UI updated to handle API-side pagination for API landing page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4523)
- Remove RBAC rule that prevented agents from deleting secrets (https://github.com/solo-io/gloo-mesh-enterprise/issues/6725)
- Fix ROUTE_SPECIFICITY option in route table DelegateAction. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5382)
- Resolve churning when route table weights are the same when using TABLE_WEIGHT. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6440)
- Tcp-based edges of the ui graph now correctly show what we do, or don't, know about their security. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7407)
- Fixed API details page not propagating apiserver error correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6050)
- Fixes duplicate license warning issue on debug page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7245)
- Debug page permission gate behavior updated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6828)
- Fixing centering not being consistent on UI e2e graph tests, as well as other fixes & polish. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6773)
- Fixed issue with UI e2e tests checking for html ids instead of classes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7097)
- Fixed various component styles in storybook. This included some accessibility improvements. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6492)
- The CORS warning message now only shows when a fetch request to the supplied graphiql explorer URL results in an error. The error message is also shown. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7139)
- Adds keyboard controls to the graphql details page search box. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6495)
- Graphql YAML modal now shows multiple related YAMLs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5898)
- Ensure TCP nodes in the graph as marked 'idle' if their most recent step had no detected traffic. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5170)
- Improves accessibility of links, adding active states, and outlines on-keyboard-focus. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6499)
- Logout button no longer shows if auth isn't enabled. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6342)
- Make clean now removes the node_modules folder. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7419)
- Fixed some a11y issues in sidebar, top bar, and a button in policy detail headers. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7136)
- Updates svg elements in the UI to use class names instead of repeated ids, and adds some aria attributes for accessibility. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6663)
- We cannot rely on the KubernetesClusterStatus to get the health of the Kubernetes Cluster when there are multiple management servers. As a workaround, the overview page now directly queries prometheus and tracks the 'relay_push_clients_connected' metric. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4915)
- Permissions for apis page are updated and now properly enforced. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6525)
- Converted interactive elements to HTML buttons and fixed an issue with content overflow on the sidebar. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6665)
- Health status counts on the overview page now act as status filter buttons. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5638)
- Improves accessibilty on some UI elements, including those nested in tab content. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6496)
- New graph test added testing unexpected but allowed graph data structures. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6343)
- Updates the browser favicon image in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5974)
- Updated the peer authentication icon that shows up in the YAML modal. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5931)
Helm Changes
- Fixed a bug where helm chart for ext-auth-service and rate-limiter deployment failed when multiple labels or annotations were added. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5226)
- Support canary IstioLifecycleManager.spec.installations from helm charts. Helm chart now takes an array of installations so that canary installation can be performed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5768)
New Features
- Adds support for proxied GraphQL requests. This allows users to configure an graphql requests to be proxied through the Gloo Mesh proxies to a GraphQL Destination. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4386)
- Adds support for GraphQL schema stitching of subschemas via GraphQLStichedSchema CRD. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4387)
- Adds the capability to have multiple WAF policies, applied to the same route, each configuring Core Rule Set (CRS). If the policies choose to enable CRS, the settings will be merged. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5935)
- Adds purge option to meshctl deregister command, which is intended for demo environments. When enabled, gloo mesh outputs, inputs, and CRDs will be removed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/577)
- Add discovery of CloudResources from CloudProviders in workload clusters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5989)
- Adds the capability to transform the response of lambda invocation. The response can be unwraped to act as if it had been handled by either an AWS API Gateway or an Application Load Balancer. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6095)
- Implement new metrics pipeline that scales to meet higher metric throughput (https://github.com/solo-io/gloo-mesh-enterprise/issues/6329)
- Adds `GraphQLSchema` CR, which is now responsible for configuring resolved and proxied GraphQL, rather than this configuration living inline in a `RouteTable` or `GraphQLStitchedSchema` resource. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6593)
- GraphQL: Renames `local` to `resolved` GraphQL and `remote` to `proxied` GraphQL. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6594)
- Add route table as an option for the ServedBy field on the API Doc CR. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6599)
- Integrate pterm in meshctl register, deregister, install, and uninstall commmands for a more interactive experience. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6648)
- Implements new TrimProxyConfigPolicy CRD and WorkloadPlugin. TrimProxyConfigPolicy allows for fine-grained selection of workload destinations for proxy traffic. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6803)
- Adds option to disable the default transformation included in Lambda requests. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7275)
- Add new destination policy, ClientTLSPolicy, for controlling TLS/mTLS configuration on upstream connections (https://github.com/solo-io/gloo-mesh-enterprise/issues/5939)
- Add support for HTTP buffer polices on routes (https://github.com/solo-io/gloo-mesh-enterprise/issues/5602)
- Add information on federation, isolation, and workspace settings YAML to apiserver UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4858)
- Support load balancing between Cloud Providers. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6418)
- Allow lambdas to be invoked from the gateway (https://github.com/solo-io/gloo-mesh-enterprise/issues/5988)
- Allow lambdas to be invoked using AWS IAM Roles for Service Accounts (https://github.com/solo-io/gloo-mesh-enterprise/issues/5991)
- Allow specifying Cloud Options for AWS routes (https://github.com/solo-io/gloo-mesh-enterprise/issues/6094)
- Allow specifying AWS Lambda invoke role arn (https://github.com/solo-io/gloo-mesh-enterprise/issues/5992)
- Adds support for the ExtAuthServer resource to be backed by a VirtualDestination referencing k8s services which handle external auth (https://github.com/solo-io/gloo-mesh-enterprise/issues/5668)
- Adds support for Automatic Persisted Queries in the GraphQL filter. Includes support for query safelist. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4383)
- End to end automated testing for GraphQL East-west. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3887)
- Add FIPS variants for the Gloo Mesh UI envoy container. There is no need for a FIPS variant of the Gloo Mesh UI ui container since we don’t use NGINX for anything TLS/SSL specific. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5012)
- Add a check ensuring the Gloo Platform licenses are valid (https://github.com/solo-io/gloo-mesh-enterprise/issues/7229)
- Add option for json output for meshctl check. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6161)
- Adds command to meshctl to gather information about a customer environment (https://github.com/solo-io/gloo-mesh-enterprise/issues/4849)
- Foundation work to support OpenAPI, gRPC, graphQL API discovery. Added support for discovery of OpenAPI specs via service annotations as well as managing the lifecycle of the corresponding CRDs based on changes to service annotations or backing pods. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5200)
- Add the --prometheus-client-cert-secret-name flag to the gloo-mesh-ui component. This should be the name of a Kubernetes Secret located in the same namespace as the gloo-mesh-ui pod. The Kubernetes Secret should have the following data values: - tls.crt - tls.key - ca.crt (https://github.com/solo-io/gloo-mesh-enterprise/issues/6059)
- Changes the status counts at the top of the apis, policies, and gateways pages into status filter buttons. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7099)
- Graph now caches the the traffic window & refresh rate when the user changes it. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6975)
- On GraphQL Explorer, if the UI and endpoint url origins don't match, a warning tooltip is display. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6745)
- GraphQL Explorer settings moved to into a new settings modal. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7406)
- Adds a link to the GraphQL explorer from the GraphQL details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6371)

v2.2.9 (v2.2.0)

Mon, 12 Jun 2023 21:26:51 GMT

v2.2.8 (v2.2.0)

Thu, 11 May 2023 23:36:21 GMT

Fixes
- Tries to fix an intermittent bug on a11y by increasing command length. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7094)
- "Support relabelling for both IPv4 and IPv6 in the prometheus config." (https://github.com/solo-io/gloo-mesh-enterprise/issues/7701)
- Stop JWT policy being erroneously applied to sidecars. This policy will is only supported on North-South gateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7873)
- Wrong destination workload id labels with lambda (or any external) destination service caused the graph to miss destination nodes. This fixes the labels setting so that the destination lambda service will reappear. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8248)
- To avoid confusion about an unsecure state vs uncertainty, labels about mtls not being applied have been removed from the graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9018)
- Allow the ability to turn off relationship tracking via the env var EXPERIMENTAL_DISABLE_RELATIONSHIP_WRITES=true. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9354)
- Allow configuration of redis read/write timeout via env var. These are `REDIS_READ_TIMEOUT` and `REDIS_WRITE_TIMEOUT` respectively. They should be set with duration notation, e.g. `REDIS_READ_TIMEOUT=10s`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9352)
- "Enforce that only a single extauth or waf policy filters are ever created per listener. The first policy applied will be taken and the rest rejected." (https://github.com/solo-io/gloo-mesh-enterprise/issues/9035, https://github.com/solo-io/gloo-mesh-enterprise/issues/6591)
- Fix garbage collection of east west gateway resources to avoid cross context writes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7378)
- Fix subset caching bug to cleanup old destination rules. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7945)
- Graph container label colors tweaked for readability when unselected. (https://github.com/solo-io/gloo-mesh-enterprise/issues/9295)
- Fixes bug where agent would not warm mid minor upgrade due to unrecognized CRDs from the mgmt cluster (https://github.com/solo-io/gloo-mesh-enterprise/issues/6938)

v2.2.7 (v2.2.0)

Thu, 20 Apr 2023 20:50:59 GMT

Dependency Bumps
- containerd/containerd has been upgraded to v1.6.18.
- solo-io/ext-auth-service has been upgraded to v0.31.4.
- solo-io/rate-limiter has been upgraded to v0.7.10.
- graphql-go/graphql has been upgraded to v0.8.1.
Fixes
- Adds in installation status to the istio cluster details and a storybook to show what that looks like. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4264)
- Fix an issue with a JWTPolicy resource that configures multiple JWT providers that share the same claimsToHeaders claim key, but different header values. Previously, there was no logic that mapped an individual JWT providers to it's claimsToHeaders configuration, which resulted in all the claimsToHeaders configurations being merged together for a single route. This meant that an authenticated request would contain all the extracted header values for a shared claim key. Now, there's logic that maps a JWT provider to it's claimsToHeaders configuration, and an authenticated request will only contain the desired claimsToHeaders configuration. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7921)
- Fix an issue where the JWTPolicy translator plugin was always setting the Envoy JWT per-route "clearRouteCache" filter field to true. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8877)
- Fix issue which caused the revision to be duplicated in the name. Fix issue which caused service annotations to not get set when using the default service. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8524)
- Add a tiebreaker case if input resource creation time between objects is equal, which is needed when several of the same type of resources are created at the same time. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8703)
- Licenses failing to load no longer results in blank content area. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8786)
- Fixed UI policy issue in routes list on policy pages. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6590)
- Documentation link on top bar now links to version-specific link instead of always to latest. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8818)

v2.2.6 (v2.2.0)

Fri, 24 Mar 2023 17:16:49 GMT

Dependency Bumps
- solo-io/solo-apis has been upgraded to gloo-v1.14.0-beta15.
Fixes
- No longer allows a conflicting lifecycle manager to install istio operators that conflict with those which are currently being garbage collected. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6465)
- Add read-only-generated-resources option for gloo-mesh-ui. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7711)
- Add credential reloading for Management Servers TLS Certificate (https://github.com/solo-io/gloo-mesh-enterprise/issues/7869)
- Access policy should create authn with STRICT mTLS if service isolation is enabled (https://github.com/solo-io/gloo-mesh-enterprise/issues/8024)
- Fix an issue with any JWTPolicy resource that specify multiple providers. Previously, an affected JWTPolicy resource's status would incorrectly change between the FAILED and ACCEPTED states between reconciliation attempts due to an idempotency bug. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8059)
- Enable HTTPBuffer policy details page (https://github.com/solo-io/gloo-mesh-enterprise/issues/6527)
- Enable ClientTLS policy details page (https://github.com/solo-io/gloo-mesh-enterprise/issues/6266)
- Fixes race b/t mgmt server goroutines that would sometimes cause agent to restart (and thus brief control plane downtime) on mgmt server start-up. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8092)
- Use last_over_time in a prometheus query to show mTLS info in the Graph UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7700)
- Fix issue where ClientTLSPolicy was not being relayed correctly (https://github.com/solo-io/gloo-mesh-enterprise/issues/7936)
- Upgrade Golang to 1.19.7 for CVEs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7632)
- \'Workspaces Importing this Route Table\' changed to reflect the current resource. (https://github.com/solo-io/gloo-mesh-enterprise/issues/8240)
- Fix the warning in the Gloo Mesh UI Overview page when it's unable to connect to prometheus (https://github.com/solo-io/gloo-mesh-enterprise/issues/7844)
- Fix CVE-2023-0286. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7986)
- Fix CVE-2021-21272, CVE-2017-11468 and CVE-2014-9356. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7916)
- Fix CVE-2022-31045, CVE-2019-12995, CVE-2019-14993, CVE-2021-39155, and CVE-2022-23635 by updating istio.io/istio dependency to 1.13.9. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7916)
- In several Policy CRDs, an object reference may not have a filled out namespace or cluster because it assumes the namespace or cluster of its parent object. This causes several UI display issues, which have now been fixed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7957)
- Remove the use of the LOG_LEVEL env var in the gloo-mesh-ui deployment and gloo-mesh-ui container. Users should instead set --verbose=true in order to get debug logging. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7920#issuecomment-1456925072)
- Set the log level of the gloo-mesh-ui to 'info' by default. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7920#issuecomment-1456925072)
Helm Changes
- The `Values.verbose` helm value will now correctly modify the log level verbosity of the gloo-mesh-ui pod. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7920#issuecomment-1456925072)

v2.2.5 (v2.2.0)

Tue, 07 Mar 2023 20:02:14 GMT

Dependency Bumps
- solo-io/ext-auth-service has been upgraded to v0.31.0.
- solo-io/licensing has been upgraded to v0.3.13.
Fixes
- Adjust status update logging to produce warnings for "not found" resource errors (https://github.com/solo-io/gloo-mesh-enterprise/issues/3817)
- Fixed a bug that affected port matching for custom east-west gateway selectors on `WorkspaceSettings`. Added the `tlsTerminationPort` field to the east-west gateway selectors on the `WorkspaceSettings` resource. The new field can be used to choose which gateway port should be used when `clientMode` is set to `tlsTermination`. Previously the system would always look for ports named "https" to that end. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6674)
- Fetch correct git tag on nightlies. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7584)
- Accept glooTrialLicenseKey if provided (https://github.com/solo-io/gloo-mesh-enterprise/issues/7613)
- Add Envoy FIPS for Gloo Mesh UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7790)
- Fix CrashLoopBackOff of mgmt server due to slice index out of range (https://github.com/solo-io/gloo-mesh-enterprise/issues/7905)
- Adds a new helm flag which allows users to filter out the Istio resources that Gloo Mesh Enterprise watches.
- Api icon on overview page now matches sidebar icon. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7717)
- GraphQL Explorer settings moved to into a new settings modal. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7406)
- Graphql YAML modal now shows multiple related YAMLs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5898)
- Error count on overview page no longer shows as red when the count is 0. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7743)
- YAML modal content now resizes to fit screen. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1057)

v2.2.4 (v2.2.0)

Fri, 10 Feb 2023 16:53:47 GMT

Fixes
- Adds in the Client TLS Policy Details Page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6266)
- Adds in the Http Buffer Policy Details Page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6527)
- Fixed an issue where DestinationRules for k8s-service based subsets were being created in destination namespace but not client namespace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7499)
- Logout button no longer shows if auth isn't enabled. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6342)

v2.2.3 (v2.2.0)

Wed, 08 Feb 2023 01:28:26 GMT

Dependency Bumps
- solo-io/licensing has been upgraded to v0.3.12.
Fixes
- Fix logging for generated certs when reading cert data from Kubernetes results in an error. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7370)
- Fixes garbage collection deletion due to names being too long. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7468)
- Add information on federation, isolation, and workspace settings YAML to apiserver UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4858)
- Added experimental configuration option to move status syncing out of core reconciliation loop to avoid blocking for long periods of time. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7327)
- Fix the license validation logic to treat expired licenses correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7461)
- Make clean now removes the node_modules folder. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7419)

v2.2.2 (v2.2.0)

Fri, 03 Feb 2023 17:12:23 GMT

Fixes
- compression no longer works on macOS Ventura due to https://github.com/upx/upx/issues/612 (https://github.com/solo-io/gloo-mesh-enterprise/issues/5844)
- Fix cert rotation issues with RootTrustPolicy that uses Vault CA. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7161)
- Tcp-based edges of the ui graph now correctly show what we do, or don't, know about their security. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7407)
- Listing of timings has been flipped in the graph settings. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7433)

v2.2.1 (v2.2.0)

Mon, 30 Jan 2023 20:33:31 GMT

Fixes
- Change input snapshot so translation times when "nothing selected" status is applied doesn't spin forever. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6977)
- Adds ExternalService addresses to Sidecar egress (https://github.com/solo-io/gloo-mesh-enterprise/issues/6984)
- Enables customization of otel collector telemetries (metrics and logs) (https://github.com/solo-io/gloo-mesh-enterprise/issues/7055)
- Filtering out all the metrics not needed for the UI to work in the Minimum Metrics Set's processor. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7102)
- Fix issue where reconciler was hotlooping due to bug in garbage collection
- Fixes conflicts in the EnvoyFilter name when federation is enabled on the same services as the VirtualDestination's backing services. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7254)
- Reverts requirement that Gateways and Envoyfilters are only translated in Gateway workspace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7184)
- Fixes duplicate license warning issue on debug page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7245)
- We cannot rely on the KubernetesClusterStatus to get the health of the Kubernetes Cluster when there are multiple management servers. As a workaround, the overview page now directly queries prometheus and tracks the 'relay_push_clients_connected' metric. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4915)

v2.2.0 (v2.2.0)

Fri, 20 Jan 2023 15:19:08 GMT

Extra Notes
- This release contained no user-facing changes.

v2.2.0-rc4 (v2.2.0)

Thu, 19 Jan 2023 22:42:45 GMT

Fixes
- Fix an issue where translated Istio resources weren't properly garbage
- Fix: Format valid domain when using CIDR in ExternalService addresses (https://github.com/solo-io/gloo-mesh-enterprise/issues/6826)
- Show linked VirtualGateway in the RouteTable Details UI page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5714)
- Show linked RouteTable in the VirtualGateway Details UI page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3948)
- Fixes hairpins when using virtual destination host from a client without subsets. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5895)
- Debug page permission gate behavior updated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6828)
- Fixing centering not being consistent on UI e2e graph tests, as well as other fixes & polish. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6773)
- Permissions for apis page are updated and now properly enforced. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6525)
New Features
- On GraphQL Explorer, if the UI and endpoint url origins don't match, a warning tooltip is display. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6745)

v2.2.0-rc3 (v2.2.0)

Mon, 16 Jan 2023 22:18:01 GMT

Extra Notes
- This release contained no user-facing changes.

v2.2.0-rc2 (v2.2.0)

Wed, 11 Jan 2023 22:44:19 GMT

v2.2.0-rc1 (v2.2.0)

Tue, 27 Dec 2022 21:16:01 GMT

Dependency Bumps
- solo-io/ext-auth-service has been upgraded to v0.29.4.
- solo-io/rate-limiter has been upgraded to v0.7.6.
- solo-io/ext-auth-service has been upgraded to v0.29.3.
- grpc/grpc-web has been upgraded to 1.4.2.
Fixes
- Shows the user what Graphql APIs are available. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4125)
- Connection policy details page hooked up to api. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4809)
- Fixes bug with discovering gateways. Where previously a services selector had to exactly match the deployment labels for it to be considered a discovered gateway, we now allow the services selector to match on a subset of the deployment labels. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4943)
- Guarantees generated root certs are generated only once upon creation of policy (https://github.com/solo-io/gloo-mesh-enterprise/issues/5691)
- Fixes problems with the applyToRoute selection process not working for non-label fields. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5955)
- Fixes an issue the HTTP method configured on a delegated RouteTable resource was not chosen when the parent RouteTable's HTTP method was undefined. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6096)
- Enables support for using CIDRs as ExternalService addresses. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6143)
- The dropdown of license information in the UI now hints to expiration concerns without clicking in. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6234)
- Fixes a problem where intermediate certs are regenerated upon during upgrade (https://github.com/solo-io/gloo-mesh-enterprise/issues/5302)
- Improves reliability and awareness of Istio cacerts by the management server (https://github.com/solo-io/gloo-mesh-enterprise/issues/5693)
- Fixes a problem where Istio cacerts are deleted when Root Trust Policy is updated (https://github.com/solo-io/gloo-mesh-enterprise/issues/5606)
- Enforce max length of 63 characters for workspace names. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6347)
- Fixes bug with rate limit policies where the rate limit would be duplicated when a route table binds to multiple listeners on a virtual gateway. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6377)
- Rotate intermediate certificates (https://github.com/solo-io/gloo-mesh-enterprise/issues/6429)
- Rename APISchema to APIDoc. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6386)
- Deduplicate the list of hosts shown in the Virtual Gateway list in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6241)
- Fix the broken link in the UI from a route to a Virtual Destination. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6157)
- Fix the graph UI when there are nodes returned with no http, tcp, or cilium metrics. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6280)
- Transformation policy details now displays information from the API. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5430)
- Fixes a bug where an AccessPolicy specifying only non-existent sources would result in allowing any source until the warning was addressed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6123)
- Fix issues with OIDC token expiring when used with JWTPolicy (https://github.com/solo-io/gloo-mesh-enterprise/issues/5389)
- Ensure the ordering of in which the routes have policies applied to them is deterministic. This ensures that if/when an error occurs it will always apply to the same route. Also, ensure that we track envoy filter uniqueness across ports, rather than treating them as equal. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6035)
- Restrict agent's ability to delete k8s secrets to prevent issues with Certs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5302)
- Fixes cross cluster federation by replacing conflicting DestinationRule with EnvoyFilter to force traffic local. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5769)
- Outlier detection fixed when applied to VirtualDestinations by removing conflicting DestinationRule. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6276)
- ExternalEndpoint locality with VirtualDestination fixed by removing conflicting DestinationRule. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6216)
- Fix ROUTE_SPECIFICITY option in route table DelegateAction. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5382)
- Resolve churning when route table weights are the same when using TABLE_WEIGHT. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6440)
- Fixed API details page not propagating apiserver error correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6050)
- Fixed various component styles in storybook. This included some accessibility improvements. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6492)
- Adds keyboard controls to the graphql details page search box. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6495)
- Ensure TCP nodes in the graph as marked 'idle' if their most recent step had no detected traffic. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5170)
- Improves accessibility of links, adding active states, and outlines on-keyboard-focus. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6499)
- Converted interactive elements to HTML buttons and fixed an issue with content overflow on the sidebar. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6665)
- Health status counts on the overview page now act as status filter buttons. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5638)
- Improves accessibilty on some UI elements, including those nested in tab content. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6496)
- New graph test added testing unexpected but allowed graph data structures. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6343)
- Updates the browser favicon image in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5974)
- Updated the peer authentication icon that shows up in the YAML modal. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5931)
Helm Changes
- Fixed a bug where helm chart for ext-auth-service and rate-limiter deployment failed when multiple labels or annotations were added. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5226)
New Features
- Adds the capability to transform the response of lambda invocation. The response can be unwraped to act as if it had been handled by either an AWS API Gateway or an Application Load Balancer. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6095)
- Implement new metrics pipeline that scales to meet higher metric throughput (https://github.com/solo-io/gloo-mesh-enterprise/issues/6329)
- Adds `GraphQLSchema` CR, which is now responsible for configuring resolved and proxied GraphQL, rather than this configuration living inline in a `RouteTable` or `GraphQLStitchedSchema` resource. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6593)
- GraphQL: Renames `local` to `resolved` GraphQL and `remote` to `proxied` GraphQL. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6594)
- Add route table as an option for the ServedBy field on the API Doc CR. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6599)
- Add new destination policy, ClientTLSPolicy, for controlling TLS/mTLS configuration on upstream connections (https://github.com/solo-io/gloo-mesh-enterprise/issues/5939)
- Add support for HTTP buffer polices on routes (https://github.com/solo-io/gloo-mesh-enterprise/issues/5602)
- Support load balancing between Cloud Providers. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6418)
- Allow lambdas to be invoked from the gateway (https://github.com/solo-io/gloo-mesh-enterprise/issues/5988)
- Allow lambdas to be invoked using AWS IAM Roles for Service Accounts (https://github.com/solo-io/gloo-mesh-enterprise/issues/5991)
- Allow specifying Cloud Options for AWS routes (https://github.com/solo-io/gloo-mesh-enterprise/issues/6094)
- Allow specifying AWS Lambda invoke role arn (https://github.com/solo-io/gloo-mesh-enterprise/issues/5992)
- Adds support for the ExtAuthServer resource to be backed by a VirtualDestination referencing k8s services which handle external auth (https://github.com/solo-io/gloo-mesh-enterprise/issues/5668)
- Adds support for Automatic Persisted Queries in the GraphQL filter. Includes support for query safelist. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4383)
- Adds command to meshctl to gather information about a customer environment (https://github.com/solo-io/gloo-mesh-enterprise/issues/4849)
- Foundation work to support OpenAPI, gRPC, graphQL API discovery. Added support for discovery of OpenAPI specs via service annotations as well as managing the lifecycle of the corresponding CRDs based on changes to service annotations or backing pods. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5200)
- Add the --prometheus-client-cert-secret-name flag to the gloo-mesh-ui component. This should be the name of a Kubernetes Secret located in the same namespace as the gloo-mesh-ui pod. The Kubernetes Secret should have the following data values: - tls.crt - tls.key - ca.crt (https://github.com/solo-io/gloo-mesh-enterprise/issues/6059)
- Adds a link to the GraphQL explorer from the GraphQL details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6371)

v2.2.0-beta1 (v2.2.0)

Wed, 09 Nov 2022 19:36:58 GMT

Dependency Bumps
- solo-io/ext-auth-service has been upgraded to v0.28.0.
- solo-io/skv2 has been upgraded to v0.23.9.
Fixes
- Restrict agent's ability to delete k8s secrets to prevent issues with Certs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5302)
- Upgraded the version of the OPA engine used in the external auth service to `0.44.0`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5394)
- RTs with same name and same route name both fail to route when only one RT references a nonexistent service. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5501)
- Fix issue where external auth policies apply to DirectResponse routes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5568)
- Setting the workload type based on the pod name to determine whether it is ambient or not. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4750)
- Query on source reporter rather than destination when not running in an Ambient mesh. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5440)
- Query on source reporter rather than destination when not running in an Ambient mesh. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5618)
- Adds service annotation to Gateway Service translation (https://github.com/solo-io/gloo-mesh-enterprise/issues/5784)
- In the Graph, Workspace container blocks now are translucent, so that items underneath don't get hidden. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5843)
- Added a temporary icon for peer authentication until a final icon is created. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5931)
- Updated apiserver logic for GraphQL resolver destinations to include services and external services. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5707)
- Updates ListWorkspaceGraphqlApisResponse to return graphql apis in a workspace, and available graphql apis for a workspace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5566)
- Adds the RouteTableRef to the ListGraphqlApis handlers response. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5539)
- Only create one gateway per revision. If it is the activeGateway use the default name, otherwise append gatewayRevision to the name. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5541)
- Fix case when Gloo Mesh & Istio would fight over IstioOperators & ValidationWebhooks when using the IstioLifecycleManager. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5770)
- Allows for GraphQL resources (GraphQlResolverMap & ApiSchema) to be exported to other workspaces. This is configured on the workspace settings. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5685)
- Now reports ACCEPTED status before completing translation of failoverPolicies with empty config or empty localityMappings. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5854)
- Added ui and apiserver support for graphql routes in route tables. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5750)
- Fix go-routine leak in licensing client, when license key is changed often. (https://github.com/solo-io/licensing/issues/107)
- Updates licensing version for watchFilesForever fix. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5681)
- Do not ever cleanup critical istio namespaces. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5705)
- Switch multi input reconcile to use generic function, rather than reimplementing in many places. This fixes a bug where the reconciler could run before the inputs were fully warmed, if the outputs warmed first. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5921)
- GatewayLifecycleManager had the wrong app label defaults, should be istio-ingressgateway or istio-egressgateway. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5862)
- Fixed service selector issues when not using default gateway names. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5706)
- Fix VirtualDestination routing in the situation where the client + server are mirrored across multiple clusters. Currently, the Istio East West Gateway may hairpin traffic back to the originating cluster, which can result in incorrect round robin behavior. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5555)
- Fix potential memory leak when using multiple mgmt plane replicas. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5839)
- Cluster cards now show a warning when agent version doesn't match dashboard's version to help prevent drift. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5729)
- Fixes error code output for CircleCI UI tests. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5723)
- Correcting the usage of namespace and workspace icons. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4714)
- Fixes a small bug in the build-ui maketarget. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5738)
- Fixes docs links in the add-cluster modal. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5940)
- Fixes the link to graphql api pages on the workspace details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5906)
- Fixed filter not showing correctly on gateway overview page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5590)
- Fixed issue with destination links on mirror policy route. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5600)
- Policy cards without supported details page no longer link to page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5731)
- WASM policy details hooked up to API. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5326)
- Remove OpenAPI CRD type validation for `google.protobuf.Value` and unify `json_value` and `value` names in the GraphQLAPI to `json`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5711)
New Features
- Added support for all DestinationRule port TLS modes in translator and ExternalService CRD (https://github.com/solo-io/gloo-mesh-enterprise/issues/4995)
- Add support for IP Blocks and Remote IP Blocks in AccessPolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5467)
- Add Rest Resolver to GraphQL Plugin. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4604)
- Adds support for gRPC GraphQL resolvers. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4380)
- Adds support for mock GraphQL resolver. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4381)
- Added components for Connection policy and Proxy Protocol policy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5683)
- Nodes with no requests are now hidden & nodes with 0 requests in most recent step are now considered idle. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5170)

v2.1.5 (v2.1.0)

Mon, 30 Jan 2023 21:16:16 GMT

Fixes
- Fixes bug with discovering gateways. Where previously a services selector had to exactly match the deployment labels for it to be considered a discovered gateway, we now allow the services selector to match on a subset of the deployment labels. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4943)
- Fix an issue where translated Istio resources weren't properly garbage
- Fix issue where reconciler was hotlooping due to bug in garbage collection
- Fixes conflicts in the EnvoyFilter name when federation is enabled on the same services as the VirtualDestination's backing services. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7254)
- Reverts requirement that Gateways and Envoyfilters are only translated in Gateway workspace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7184)
- Show linked VirtualGateway in the RouteTable Details UI page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5714)
- Show linked RouteTable in the VirtualGateway Details UI page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3948)
- Fixes hairpins when using virtual destination host from a client without subsets. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5895)
- Fixes duplicate license warning issue on debug page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/7245)
- Debug page permission gate behavior updated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6828)
- Fixing centering not being consistent on UI e2e graph tests, as well as other fixes & polish. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6773)
- Permissions for apis page are updated and now properly enforced. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6525)

v2.1.4 (v2.1.0)

Tue, 17 Jan 2023 18:17:06 GMT

Fixes
- Improved error handling when a RouteTable attempts to delegate to other RouteTables, but these delegatee RouteTables cannot be found. Prior to this change, this could result in an attempt to create an invalid Istio VirtualService, which would be rejected by Istio's admission webhook, and would cause unnecessary noise in the server logs. The management server is now able to detect these errors and instead report an informative warning on the RouteTable status. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4290)
- Guarantees generated root certs are generated only once upon creation of policy (https://github.com/solo-io/gloo-mesh-enterprise/issues/5691)
- Ensures AuthorizationPolicy reflects restrictive WorkspaceSettings spec (https://github.com/solo-io/gloo-mesh-enterprise/issues/6250)
- Fixes a problem where intermediate certs are regenerated upon during upgrade (https://github.com/solo-io/gloo-mesh-enterprise/issues/5302)
- Improves reliability and awareness of Istio cacerts by the management server (https://github.com/solo-io/gloo-mesh-enterprise/issues/5693)
- Fixes a problem where Istio cacerts are deleted when Root Trust Policy is updated (https://github.com/solo-io/gloo-mesh-enterprise/issues/5606)
- Rotate intermediate certificates (https://github.com/solo-io/gloo-mesh-enterprise/issues/6429)
- Fix the connection plugin exiting early when more than one connection policy is applied. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6476)
- Fix for generated ServiceEntries when using Federation (https://github.com/solo-io/gloo-mesh-enterprise/issues/6744)
- Fixes virtual destination subset routing by adding subsets to EnvoyFilter sni match to prevent hairpins and fix subset DestinationRule translation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5895)
- Fixes cross cluster federation by replacing conflicting DestinationRule with EnvoyFilter to force traffic local. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5769)
- Outlier detection fixed when applied to VirtualDestinations by removing conflicting DestinationRule. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6276)
- ExternalEndpoint locality with VirtualDestination fixed by removing conflicting DestinationRule. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6216)
- Fix: Format valid domain when using CIDR in ExternalService addresses (https://github.com/solo-io/gloo-mesh-enterprise/issues/6826)
- Fix for gracefully handling missing GVKs in runtime's scheme. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6827)
- Remove RBAC rule that prevented agents from deleting secrets (https://github.com/solo-io/gloo-mesh-enterprise/issues/6725)

v2.1.3 (v2.1.0)

Mon, 19 Dec 2022 18:21:40 GMT

Fixes
- Fixes an issue the HTTP method configured on a delegated RouteTable resource was not chosen when the parent RouteTable's HTTP method was undefined. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6096)
- Enforce max length of 63 characters for workspace names. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6347)
- Fix ROUTE_SPECIFICITY option in route table DelegateAction. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5382)
- Resolve churning when route table weights are the same when using TABLE_WEIGHT. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6440)
- Improves accessibility of links, adding active states, and outlines on-keyboard-focus. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6499)
- New graph test added testing unexpected but allowed graph data structures. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6343)

v2.1.2 (v2.1.0)

Wed, 07 Dec 2022 22:42:26 GMT

Fixes
- Connection policy details page hooked up to api. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4809)
- Deduplicate the list of hosts shown in the Virtual Gateway list in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6241)
- Fix the broken link in the UI from a route to a Virtual Destination. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6157)
- Fix the graph UI when there are nodes returned with no http, tcp, or cilium metrics. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6280)
- Fixes a bug where an AccessPolicy specifying only non-existent sources would result in allowing any source until the warning was addressed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6123)
- Restrict agent's ability to delete k8s secrets to prevent issues with Certs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5302)
- Shows the user what Graphql APIs are available on the workspace details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4125)
- Ensure TCP nodes in the graph as marked 'idle' if their most recent step had no detected traffic. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5170)

v2.1.1 (v2.1.0)

Tue, 22 Nov 2022 21:52:45 GMT

Fixes
- WASM policy details hooked up to API. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5326)
- Fix issue where external auth policies apply to DirectResponse routes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5568)
- Setting the workload type based on the pod name to determine whether it is ambient or not. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4750)
- Query on source reporter rather than destination when not running in an Ambient mesh. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5440)
- Query on source reporter rather than destination when not running in an Ambient mesh. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5618)
- Transformation policy details now displays information from the API. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5430)
- Ensure the ordering of in which the routes have policies applied to them is deterministic. This ensures that if/when an error occurs it will always apply to the same route. Also, ensure that we track envoy filter uniqueness across ports, rather than treating them as equal. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6035)
- Fix potential memory leak when using multiple mgmt plane replicas. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5839)
- Switch multi input reconcile to use generic function, rather than reimplementing in many places. This fixes a bug where the reconciler could run before the inputs were fully warmed, if the outputs warmed first. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5921)
- Fixed API details page not propagating apiserver error correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/6050)
- Fixes a small bug in the build-ui maketarget. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5738)
- Fixes error code output for CircleCI UI tests. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5723)
- Fixes docs links in the add-cluster modal. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5940)
- Fixed issue with destination links on mirror policy route. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5600)
- Updates the browser favicon image in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5974)
- Updated the peer authentication icon that shows up in the YAML modal. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5931)

v2.1.0 (v2.1.0)

Tue, 01 Nov 2022 21:16:03 GMT

Extra Notes
- This release contained no user-facing changes.

v2.1.0-rc4 (v2.1.0)

Tue, 01 Nov 2022 17:59:47 GMT

Fixes
- Restrict agent's ability to delete k8s secrets to prevent issues with Certs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5302)
- In the Graph, Workspace container blocks now are translucent, so that items underneath don't get hidden. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5843)
- Updates ListWorkspaceGraphqlApisResponse to return graphql apis in a workspace, and available graphql apis for a workspace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5566)
- Fix case when Gloo Mesh & Istio would fight over IstioOperators & ValidationWebhooks when using the IstioLifecycleManager. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5770)
- Now reports ACCEPTED status before completing translation of failoverPolicies with empty config or empty localityMappings. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5854)
- GatewayLifecycleManager had the wrong app label defaults, should be istio-ingressgateway or istio-egressgateway. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5862)
- Fixes the link to graphql api pages on the workspace details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5906)

v2.1.0-rc3 (v2.1.0)

Thu, 20 Oct 2022 22:18:55 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.23.9.
Fixes
- RTs with same name and same route name both fail to route when only one RT references a nonexistent service. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5501)
- Updated apiserver logic for GraphQL resolver destinations to include services and external services. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5707)
- Allows for GraphQL resources (GraphQlResolverMap & ApiSchema) to be exported to other workspaces. This is configured on the workspace settings. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5685)
- Remove OpenAPI CRD type validation for `google.protobuf.Value` and unify `json_value` and `value` names in the GraphQLAPI to `json`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5711)
- Added ui and apiserver support for graphql routes in route tables. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5750)
- Updates licensing version for watchFilesForever fix. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5681)
- Do not ever cleanup critical istio namespaces. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5705)
- Fixed service selector issues when not using default gateway names. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5706)
- Fix VirtualDestination routing in the situation where the client + server are mirrored across multiple clusters. Currently, the Istio East West Gateway may hairpin traffic back to the originating cluster, which can result in incorrect round robin behavior. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5555)
- Fixed filter not showing correctly on gateway overview page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5590)
- Policy cards without supported details page no longer link to page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5731)
New Features
- Add support for IP Blocks and Remote IP Blocks in AccessPolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5467)

v2.1.0-rc2 (v2.1.0)

Thu, 13 Oct 2022 21:52:30 GMT

Dependency Bumps
- solo-io/ext-auth-service has been upgraded to v0.28.0.
Fixes
- Upgraded the version of the OPA engine used in the external auth service to `0.44.0`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5394)
- Adds the RouteTableRef to the ListGraphqlApis handlers response. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5539)
- Only create one gateway per revision. If it is the activeGateway use the default name, otherwise append gatewayRevision to the name. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5541)
- Fix go-routine leak in licensing client, when license key is changed often. (https://github.com/solo-io/licensing/issues/107)
New Features
- Add Rest Resolver to GraphQL Plugin. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4604)

v2.1.0-rc1 (v2.1.0)

Fri, 07 Oct 2022 20:41:45 GMT

Dependency Bumps
- solo-io/ext-auth-service has been upgraded to v0.27.0.
- solo-io/ext-auth-service has been upgraded to v0.26.0.
Fixes
- Show the status of individual routes in the Dashboard. The reason a given route was replaced should be visible on hover. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3946)
- Updated the apiserver handler to return GraphQL resource counts. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5567)
- Fixes an NPE when session is not found during initialization of the session in ext-auth-service (https://github.com/solo-io/gloo-mesh-enterprise/issues/5483)
- Fix reconciler bucket sizes, change runbook url, adjust alert thresholds after perf improvements. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5580)
- When using Cookie based session, the response headers were not set with new cookie values for the id, access, and refresh tokens when a refresh token was used to obtain new tokens. This fix ensures that the response headers are set with the new cookie values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5483)
- Fixes a problem where the ext-auth-service fails to load multiple configurations on startup. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5250)
- Add trust domain back into API. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5582)
- Support rootNamespace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5583)
- Turned down the log level of gloo network licensing logs for NetworkPolicy generation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5534)
- Do not create namespaces when they exist. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5550)
- Sanitize all parent label names which are generated from user input. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5529)
- Updated the GraphQL REST resolver and GraphQL server config modals to use tabs and tables. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5516)
- Was using the incorrect value when matching the istio-injection label in mutating webhook. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5545)
Helm Changes
- The GLOO_MESH_CLUSTER_NAME env variable is no longer needed in the Istio Operator spec. The Istio Operator meshConfig.defaultConfig.proxyMetadata field no longer needs to have the GLOO_MESH_CLUSTER_NAME env variable set to the cluster name. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5298)
New Features
- Adds `ApplyToWorkloads` to AccessPolicy API. For security reasons, this is recommended over the `ApplyToDestinations` field. "Allow nothing" policies (fallback deny all) are now supported using the new `ApplyToWorkloads` field and an empty `authz` field. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3019)

v2.1.0-betagraphql1 (v2.1.0)

Tue, 14 Jun 2022 18:42:47 GMT

New Features
- Add GraphQL. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3611)

v2.1.0-beta29 (v2.1.0)

Tue, 04 Oct 2022 13:51:13 GMT

Fixes
- Much better error handling/recovery due to translator refactor. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5247)
- Fix issue that caused API generation to not work for IstioOperatorSpec. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5352)
- Fix type conversion of tag so it doesn't panic when not defined. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4965)
- Displays default GraphQL schema values in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5469)
- Adds more GraphQL language support to the schema UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5014)
- Add a new field to the WAF api to allow users to specify the settings for the Core Rule Set. Without these settings the WAF will not function properly. This can either be specified as an inline string, or a file. See here for more info: https://github.com/coreruleset/coreruleset. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5227)

v2.1.0-beta28 (v2.1.0)

Thu, 29 Sep 2022 21:02:18 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.23.4.
Fixes
- Users can now change logging level in debug UI for external authorization and rate limiting plugins (https://github.com/solo-io/gloo-mesh-enterprise/issues/3280)
- Add ProxyProtocol listing support to Overview and Policies pages in UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4414)
- Add ConnectionPolicy listing support to Overview and Policies pages in UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4807)
- Remove updated_at field from status. The semantics were unclear, and it was causing a lot of jitter in the mgmt-server. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5400)
- Change gloo platform logo. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5320)
- Fix rollback functionality for Istio Lifecycle Manager. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5246)
- Fix subtle bug in redis key cleanup logic that was improperly capturing the key variable in the loop. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5370)
- Fix Idempotency of VirtualDestination status outputs. Also add Idempotency tests to ensure that the status outputs are consistent from run to run of the translator. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5315)
- Create initial IssuedCertificate from RootTrustPolicy faster (https://github.com/solo-io/gloo-mesh-enterprise/issues/5303)
- Slightly change the way redis Writes are handled to improve performance, and memory footprint within the app. Rather than writing directly to the `HashTables` all replicas read from. Each replica will write to temporary HashTables, and then replace the old ones when the operation is complete. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5190)
- Reduce the metrics emitted by default to not include translation context specific metrics. When running in environments with many namespaces. This also renames the translation recorder metric to be more descriptive. The context specific translation metric has changed from gloo_mesh_translation_time_sec -> gloo_mesh_translation_context_time_sec. Now gloo_mesh_translation_time_sec will refer to the total translation time, and the label being the specific translator being run. For example, The main translator, istio-lifecycle, cert-issuer, etc. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5455)
- Replace uses of `Clone()` in the relay server with `ShallowCopy()`. This will avoid extra allocations, and added time under lock within the server. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5190)
- Fixed a couple display issues caused by longer than expected text. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5421)
- List boxes now have a max-height and won't bloat the page on large lists. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5422)
- Update gloo-mesh-envoy base image from v1.20.0 to v1.23.1. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5353)
Helm Changes
- Ensures consistent naming of ingress and east-west gateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5165)
- The prometheus chart has been updated from 14.9.2 to 15.12.2. (https://github.com/solo-io/gloo-mesh-enterprise/pull/5365)
- The redis chart has been updated from 6.2.6 to 7.0.4. (https://github.com/solo-io/gloo-mesh-enterprise/pull/5365)
New Features
- Add support for HTTP request header matching conditions in AccessPolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4830)
- Re-added support for the new `meshctl check` command, which can be used to verify that Gloo Mesh is installed correctly and is ready to use. This iteration ships with 2 specific checks: Ensuring that the Gloo Mesh agents are all registered/connected, and ensuring that the management plane pods are all running. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2362)
- Add port matcher to RouteTable match field. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5329)
- Allow the RateLimitServerConfig to be written in the app namespace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4740)
- Added mockup for Transformation policy details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2480)
- Added mockup for WASM policy details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2487)

v2.1.0-beta27 (v2.1.0)

Tue, 13 Sep 2022 21:44:52 GMT

Fixes
- Fix cleanup logic for federation when using workspace namespace selectors. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5289)
- Added hover state to various UI elements and polished site sidebar. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5186)

v2.1.0-beta26 (v2.1.0)

Mon, 12 Sep 2022 23:29:17 GMT

Fixes
- Fix stalls in RootTrustPolicy algorithm (https://github.com/solo-io/gloo-mesh-enterprise/issues/5090)
- Show helm docs for the Managed Installations helm subchart. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4147)

v2.1.0-beta25 (v2.1.0)

Mon, 12 Sep 2022 17:28:20 GMT

Fixes
- Keep backwards compatible behavior with mgmtClusterName if global.cluster is not explicitly set to a non-default value. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5028)
- This is the backwards compatible yarn 2+ change. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5228)
- Reduce load times for the Debug page in the dashboard. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5055)
- Fix Canary upgrade feature for the Istio Lifecycle Manager. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5061)
- Removed autogenerated revision in favor of user defined revision. In addition, the revision is now used to signal an in-place upgrade vs. a canary upgrade. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5115)
- Improved changeover between revisions when doing canary upgrade. New defaultRevision to assist with this. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5230)
- Fix case where multiple gateways that were selected by the same virtual gateway did not both get configuration applied during translation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5251)
- Metric flags added to `GetWorkloadMetrics` call. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4855)
- Fixed graph settings not being accessible when graph failed to load or returned no data. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5196)
- Cilium nodes in the UI's graph now are more accurate about idleness. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4720)
New Features
- Allow named target port on Kubernetes Service definition. Previously our translator would fail if a named target port was specified on a Kubernetes Service definition, however now we allow it with an important caveat. That caveat being that there can only be 1 numbered port backing the service. If there are multiple, the system will pick the first available port. This will be fixed in a future release, but this will allow us to support named target ports in the short-term. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3571)
- New default validating webhook for istio resources managed by Istio Lifecycle Manager (https://github.com/solo-io/gloo-mesh-enterprise/issues/5248)
- Adds the ability to select namespaces by label in the workspace resource. Previously kubernetes clusters were selectable by label, but namespaces were not. For example, you can now use istio injection labels to select all namespaces with sidecars. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5072)

v2.1.0-beta24 (v2.1.0)

Fri, 02 Sep 2022 20:29:47 GMT

Fixes
- Allow multiple rate limit policies to be applied per route and destination. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4515)
- Remove the requirement for TLS and HTTPS ports on east-west gateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4997)
- Fixes a bug where VirtualDestinations with multiple ports generated incorrect VirtualServices to attach to East/West gateways for TLS termination routing scenarios. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5071)
- Fixes a permomance issue in the management server caused by excessive reads of in-memory state when propagating resources to Relay. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5155)
- Ensure east-west gateway VirtualServices are idempotent by always creating them in the correct namespace, specifically the gateway namespace. This was causing high amounts of churn on the workload cluster, which was in turn causing the mgmt-server to continuously translate. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5073)
- Add a "rate-limiter" to the snapshot cache such that it can only send once/second. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5107)
New Features
- Add alerts for Gloo Mesh components. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5109)
- New feature to handle multiple WAF policies that do not have conflicting configurations. A new optional priority field is introduced if the user wishes to control the order of application for the rulesets between policies. If any WAF policies applying to a route have a priority all routes must also have a priority for the priority to respected. If no priority is provided, the WAF policies for a route will be applied in ascending order of creation time. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4841)
- Two-way edges on graph can now be viewed separately instead of only in default combined view. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4886)

v2.1.0-beta23 (v2.1.0)

Fri, 26 Aug 2022 18:12:25 GMT

Dependency Bumps
- solo-io/licensing has been upgraded to v0.3.9.
Fixes
- Applied policies in the dashboard should be displayed with the correct type. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3792)
- The dashboard should no longer crash in the presence of just a trial license. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5086)
- Fix patch context in envoy filter patcher. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5060)
- Properly cleanup Istio Lifecycle Manager resources when the object is deleted. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4794)
Helm Changes
- Rename `glooMeshMgmtServer.ports.stats` to `gloomeshMgmtServer.statsPort`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4209)
New Features
- License info dropdown added to top bar, and logout button added to new profile button. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5081)

v2.1.0-beta22 (v2.1.0)

Wed, 24 Aug 2022 15:37:42 GMT

Fixes
- Updates copy and icons to new specs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4975)
- The Gloo Mesh management server should no longer crash when service isolation is enabled. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4987)
- Fix the warming logic in relay such that it will only log once, rather than on each sync. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4250)
- Fix issue in kube upsert that caused deployments to be continuously picked up by Lifecylce reconciler. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4979)
- Add Istio Lifecycle Manager reconciler to snapshot history (https://github.com/solo-io/gloo-mesh-enterprise/issues/5006)
- Documentation links update / fixed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4988)
- Idle edges no longer lose mTLS status. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4874)
- Fixed graph click+drag bug. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5020)
New Features
- Allow missing or failed JWT auth. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4235)
- The UI now informs a user if a license they have has expired. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4630)
- Added Istio overview data to Overview page's cluster details. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4265)
- Added TCP metrics info to graph details tab. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5009)
- Graph Istio L4 metrics / TCP metrics added to the graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4992)

v2.1.0-beta21 (v2.1.0)

Fri, 19 Aug 2022 15:59:34 GMT

Fixes
- Ensure that empty fields in ConnectionPolicy are handled correctly in all cases. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4921)
- When the glooMeshUi.auth.oidc.clientSecretName helm value is empty, we will add the default, 'dashboard', in both the Secret CR and the Dashboard CR. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3804)

v2.1.0-beta20 (v2.1.0)

Thu, 18 Aug 2022 15:13:47 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.22.29.
- solo-io/ext-auth-service has been upgraded to v0.23.0.
- solo-io/solo-apis has been upgraded to gloo-v1.13.0-beta5.
Fixes
- Make it so that connectTimeout is no longer required on ConnectionPolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4921)
- Fix relay configuration to make sure ConnectionPolicy is relayed correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4625)
- Fix duplicate JWT filter issue where multiple JWT filters were created on a single http listener.
- Some file sizes increased due to helm chart changes, resulting in our helm values not rendering in our user-facing docs. This fixes that issue and resumes rendering of our helm values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4821)
- Fix several cases where we failed to record errors associated with Services, Virtual Destinations, and External Services. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3821)
- Updates the storybook folder structure to match the UI codebase. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4946)
New Features
- Upgraded ext-auth-service & solo-apis which introduces a `TargetDomain` field in `InternalSession` and `RedisSession` of the `OidcAuthorizationCode` config in the `ExtAuthPolicy`. Setting the `TargetDomain` field will store the `TargetDomain` value in redis or in the cookie and the value will be used to validate requests that use the cookie or the redis session. (https://github.com/solo-io/ext-auth-service/issues/314)

v2.1.0-beta19 (v2.1.0)

Mon, 15 Aug 2022 21:00:47 GMT

Fixes
- Fix v3 metric service from logging error if error is a result of context cancellation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4134)
- Fix slow upsert time by only creating label set once, and using a shallow copy for relay snapshot. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4873)
- Permission hook now uses api feature flags. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4731)
- Graph details view updated to incorporate mockup changes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4685)
Helm Changes
- Add backwards compatability logic to the UI chart that mirrors what was added to the management chart for the old and new cluster name parameter. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4866)
New Features
- Add resilience.policy.gloo.solo.io/v2/ConnectionPolicy to allow for the configuration of TCP connection settings. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4625)
- Expose clock skew seconds on JWT Provider (https://github.com/solo-io/gloo-mesh-enterprise/issues/4235)
- Adds support for a `ClientMode` configuration on `VirtualDestination`s as well as a global default `ClientMode` configuration for admins on the `WorkspaceSettings`. The new client mode `tls_termination` tells Gloo Mesh to translate istio resources for `VirtualDestination`s that terminate mTLS at the East/West gateways during cross cluster routing, rather than forwarding the traffic using sni. This is particularly useful for standalone Gloo Mesh Gateway (no mesh, no sidecars) since it allows for intelligent failover and locality routing across clusters to pods that aren't explicitly part of the mesh, at the expense of being only able to do so from the gateway during ingress. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4257)
- Cilium nodes / edges can now be clicked on the graph and viewed in the details pane. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4887)

v2.1.0-beta18 (v2.1.0)

Thu, 11 Aug 2022 12:44:44 GMT

Fixes
- Fix concurrency bug that caused some issues with statuses. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4298)

v2.1.0-beta17 (v2.1.0)

Wed, 10 Aug 2022 18:50:55 GMT

Fixes
- Fix nil pointer panic when customAuth is used (https://github.com/solo-io/gloo-mesh-enterprise/issues/4756)
- Add default enabled.false value for Istio LCM. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4824)

v2.1.0-beta16 (v2.1.0)

Tue, 09 Aug 2022 14:09:28 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.22.24.
Fixes
- Allow auto-detection of pilot images without `istio` in the image name (https://github.com/solo-io/gloo-mesh-enterprise/issues/3593)
- Update the main navbar to use the new gloo platform icons and gloo solo icon. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4712)
- Update the welcome page to use new gloo platform icons and gloo platform text. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4712)
- Header and method matchers for routes on delegated RouteTables will now be taken into account and merged with the matchers on the parent route. If there is a conflict, both RTs will report a warning, and any requests matching the parent route's matchers will receive a direct response. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4457)
- Silence proto registration warnings (https://github.com/solo-io/gloo-mesh-enterprise/issues/4797)
- Use Server Side apply for corev1 and appsv1 resources to avoid issues with upserting. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4323)
- Graph labels and tooltips now support displaying Istio / Cilium icons. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4676)
- Two way edges no longer flicker unexpectedly. Two way edges with L7 data in only one direction now appear as 1-way L7 edges. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4735)
Helm Changes
- Deprecate `Values.mgmtClusterName` helm value in the gloo-mesh-enterprise helm chart. Use `Values.global.cluster` instead. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4253)
New Features
- Allow users to install Gloo Mesh Enterprise in a single cluster via the helm chart.

v2.1.0-beta15 (v2.1.0)

Wed, 03 Aug 2022 19:47:12 GMT

Dependency Bumps
- solo-io/gloo-network-agent has been upgraded to v0.1.0.
- solo-io/solo-apis has been upgraded to gloo-v1.12.0-rc5.
- solo-io/solo-kit has been upgraded to v0.30.2.
- solo-io/ext-auth-service has been upgraded to v0.20.10.
- solo-io/k8s-utils has been upgraded to v0.1.0.
- solo-io/rate-limiter has been upgraded to v0.7.1.
Fixes
- Prevent resource translation for gloo gateway features (VirtualGateway) if there is no license for gloo gateway. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3791)
- Prevent route table plugins from running on east-west destinations (workloads) if gloo mesh license is not found. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4256)
- Gate CiliumNetworkPolicy translation on Gloo Network license. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3972)
- Fix DPANIC related to incorrectly named metrics during server start. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4665)
- Fixed a browser warning in the storybook UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4718)
- Updated the modal UI, refactoring it and fixing some bugs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4705)
- Fixed the "View YAML" modal styles for error and loading states. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4696)
Helm Changes
- Add a new helm value, licenseSecretName. When licenseSecretName is set, that secret will be used to load gloo licenses instead of creating a secret in our helm chart. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3198)
- make gloo-mesh-enterprise-license an optional secretRef (https://github.com/solo-io/gloo-mesh-enterprise/issues/3972)
New Features
- Add Gloo Network Agent as dependency. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4374)
- Allows ext-auth CRD to support refresh tokens for cookies without using redis. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4338)
- Support TLS origination on wildcard domains for External Services. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4544)
- Graph updated to match new design for R4 edges and better support for two-way edges. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4675)
- Implemented the "View YAML" button on the GraphQL details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4650)

v2.1.0-beta14 (v2.1.0)

Thu, 28 Jul 2022 18:41:36 GMT

Fixes
- Appropriately restrict permissions of "Get YAML" button in the UI when a user has access to some but not all workspaces. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4642)
- Parent route tables should pass their policy resources down to child route tables across workspaces, they should also apply policies to child routes (https://github.com/solo-io/gloo-mesh-enterprise/issues/3858)
- Fixes cases where rate limit rules could be counted multiple times when applied to the same gateway/port. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4210)
- Display issues fixed on site breadcrumbs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4593)
- If Cilium metrics exist on HTTP node, details now added to HTTP side panel. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4597)
- GraphQL scheme tabs now provide proper descriptions. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4447)
New Features
- Add plugin and route action for GraphQL. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4379)
- Added the resolver button tooltip to the to the GraphQL schema UI with mock data. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4651)
- Added tooltips with markdown-supported descriptions to the GraphQL schema UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4446)
- Implemented a details view for each schema type on the GraphQL API details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4491)

v2.1.0-beta13 (v2.1.0)

Thu, 21 Jul 2022 17:07:04 GMT

Dependency Bumps
- solo-io/licensing has been upgraded to v0.3.4.
Fixes
- Allow the helm values `glooGatewayLicenseKey`, `glooMeshLicenseKey`, and `glooNetworkLicenseKey` to be empty. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4588)
- Extra metric types no longer treated as a status, and cilium nodes now support being idle. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4539)

v2.1.0-beta12 (v2.1.0)

Wed, 20 Jul 2022 21:31:51 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.22.22.
- solo-io/licensing has been upgraded to v0.3.3.
Fixes
- Fixes a bug in status reporting that sometimes resulted in management server restarts. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4298)
- Ensure that KubernetesCluster domain is properly defaulted to `cluster.local` in translation utils. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2826)
- Fixes an issue in the failover policy plugin where locality settings are not being applied when the virtual destination is defined in the same workspace but in a cluster/namespace combination different from the cluster/namespace where the selected services are defined. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4394)
- Fixes a panic which triggered a crashLoopBackoff when discovery got into a bad state. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4479)
- Fixes query parameters being ignored in delegated route table. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4365)
- Fixes VirtualService env test flake. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4390)
- When a RouteTable was selected by a listener on a VirtualGateway, the resulting Istio VirtualService would select all Gateways that were created by the VirtualGateway. Now the VS will correctly select only those Gateways corresponding to the specific listeners which select the RT. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4549)
- The apis landing page now redirects to the dashboard if the GraphQL feature flag is not set. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4522)
- cy.js removed some styling options due to cross-browser problems, so we added them back in for our use case. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4442)
Helm Changes
- Add three additional helm values, `glooGatewayLicenseKey`, `glooMeshLicenseKey`, and `glooNetworkLicenseKey`. These additional values can be used to configure multiple license keys at once. Note: The old `licenseKey` helm value still exists, and can be used to input a single license key. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4114)
New Features
- Adds the ability to use the enforcement engine to filter. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4219)
- Adds the sidecar-accel helm chart as an optional dependency to gloo-mesh-addons. Enable for eBPF based acceleration to Istio sidecar networking. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3308)
- Debug resources are now filterable. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4223)
- Debug resources can now be viewed by their parent policy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4226)
- Debug resources now have a page in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4221)
- Support wildcard prefix domains in the hosts field for the ExternalService. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4501)
- Add an additional secret which can contain multiple licenses with data fields `gloo-gateway-license-key`, `gloo-mesh-license-key`, and `gloo-network-license-key`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4114)
- Show licensing warnings in the logs when an Enterprise License expires. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4119)
- Update Licensing Types to include:
- A license can have "Addons" in either a Trial or Enterprise mode. Currently the only addon available is "GraphQL". (https://github.com/solo-io/gloo-mesh-enterprise/issues/4113)
- Cluster cards on overview now list agent version. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4510)
- Implemented a search box and schema view, for supported GraphQL schema types. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4316)
- Implemented URL hash links in the schema section of the GraphQL API details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4449)
- Created the initial GraphQL api details page implementation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4126)
- Rest / gRPC resolver modals added. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4127)
- Virtual Machines are now distinguished from other types on the observation graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1691)

v2.1.0-beta11 (v2.1.0)

Tue, 12 Jul 2022 14:55:06 GMT

Fixes
- Limit kubernetes_sd to pods in gloo-mesh namespace to improve performance (https://github.com/solo-io/gloo-mesh-enterprise/issues/4336)
- Reduce memory profile of single thread snapshots by removing locks. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4378)
- Graph nodes and tooltips should no longer have issues due to graph refreshes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4436)
New Features
- Cilium support added to graph if feature flag is enabled. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4400)

v2.1.0-beta10 (v2.1.0)

Fri, 08 Jul 2022 21:25:15 GMT

Fixes
- Fixes translation of AuthorizationPolicy when AccessPolicy uses a selector that provides name/namespace/cluster for a to be created service account. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4303)
- Fix logic for selecting meshes in RootTrustPolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4421)
New Features
- Adds extra info on tooltip hover on the graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4352)

v2.1.0-beta9 (v2.1.0)

Thu, 07 Jul 2022 15:00:26 GMT

Fixes
- Fix issue related to exported virtual destinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4262)
New Features
- Expose KeepToken for JWTPolicy resource to keep the JWT in the request post verification. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4239)
- ExternalService support for addresses. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4171)
- Cilium stats added to cluster overview cards.

v2.1.0-beta8 (v2.1.0)

Thu, 30 Jun 2022 15:12:09 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.22.20.
Fixes
- When installing with `meshctl install`, we will default to installing the same version as the CLI version. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4294)
- Fix status warning text to change "clusters" to "namespaces". (https://github.com/solo-io/gloo-mesh-enterprise/issues/4291)
- Fix relay agent unintentionally applying labels to Istio resources that are not owned by Gloo Mesh and appending said resources to the list of resources to be reconciled in the management server. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4196)
- Fix prometheus-server configmap such that we only scrape metrics from the gloo-mesh-mgmt-server pods instead of relying on the endpoints. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4252)
- Fixed toggle behavior when searching inside a graph filter dropdown. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4288)
New Features
- Add options to disable configuration from workload clusters or per-namespace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3900)
- Added the GraphQL API details page with mock data. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4126)
- Improved snapshot endpoints. Added new params to snapshots/output & snapshots/input including format, clusters, namespaces, and resourceTypes. Improved UI to utilize these new options. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3713)

v2.1.0-beta7 (v2.1.0)

Thu, 23 Jun 2022 17:55:06 GMT

New Features
- Adds WorkloadReferences for AccessLogPolicy and WasmDeploymentPolicy when referencing selected workloads. This allows the status to display the type of workload selected in the policy status. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3633)
- Add Istio Lifecycle Management feature to Gloo Mesh (https://github.com/solo-io/gloo-mesh-enterprise/issues/1641)
- Nodes' visibility in the graph is now togglable by type. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4144)
- Added a graphql APIs overview page, accessible through the sidebar. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4124)

v2.1.0-beta6 (v2.1.0)

Fri, 17 Jun 2022 19:07:42 GMT

Fixes
- Better import/export handling for rate limits and improved error handling. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3899)
- Add support for PKCS#8 rsa public keys. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4189)
- Allow resources selected for export to be marked as exported in the exporting workspace's workspace status. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3942)
- Policy "filter by" list is now alphabetical. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4087)
Helm Changes
- Allows container security context to be overridden or omitted. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4000)
New Features
- Add gathering of Cilium Metrics. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3973)
- Add a flag --enable-cluster-load-balancing which when set to true will enable server side cluster load
- Support using kubernetes format TLS secrets as a provided CA. As an added benefit this now allows
- Auto detect AWS loadbalancer hostnames when using meshctl cluster register. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4181)

v2.1.0-beta5 (v2.1.0)

Tue, 14 Jun 2022 15:14:07 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.22.17.
New Features
- Discover installed CNIs (Cilium & Calico) (https://github.com/solo-io/gloo-mesh-enterprise/issues/3965)
- Enforce access policies via cilium (currently supports server-side only). (https://github.com/solo-io/gloo-mesh-enterprise/issues/3966)
- Enforce workspace isolation via cilium (currently supports server-side only). (https://github.com/solo-io/gloo-mesh-enterprise/issues/3971)

v2.1.0-beta4 (v2.1.0)

Mon, 13 Jun 2022 15:22:41 GMT

Fixes
- Set warning status on resources that do not select anything (https://github.com/solo-io/gloo-mesh-enterprise/issues/3706)
- Populate the Gateway Workloads section of the Virtual Gateway details page in the UI. Improve listing of External Endpoints on the External Service details page. Improve listing of Backing Services on the Virtual Destination details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3947)
- Sort Workspace resource by import status (exported, private, imported) on the Workspace Details page of the dashboard. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4072)
- Nodes in the metrics graph are now better positioned to avoid vertical edge confusion. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4024)
- When there are multiple mgmt server replicas, the KubernetesCluster 'relay disconnected' status becomes meaningless. It is now removed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4043)
- Node hover behavior updated to match mockup. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4028)
New Features
- Extends the HeaderManipulationPolicy to include config for manipulating headers on individual destinations for a given route. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3554)

v2.1.0-beta3 (v2.1.0)

Thu, 26 May 2022 16:16:55 GMT

Dependency Bumps
- solo-io/ext-auth-service has been upgraded to v0.20.2.
- solo-io/skv2 has been upgraded to v0.22.16.
Fixes
- Allow OIDC sign in to Gloo Mesh UI when using AWS NLB with TLS termination and similar load balancer setups. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3499)
- Fix admin namespace being auto-included in the management cluster whenever a Workspace uses another (non-admin) namespace from the management cluster. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3870)
- The "View YAML" button in dashboard now works if the user has access to a resource's owner Workspace or to the resource itself. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3868)
- Implement access control for cluster-centric resource views. Users have access to information about a cluster if they have access to a workspace that includes a namespace from that cluster. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2961)
- In the Gloo Mesh Graph UI, show nodes that are receiving traffic but not sending them. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3744)
- Allow Policies using Route Selection to make selections based on Name, Namespace, and Cluster. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3673)
- Fixed a bug that prevented cross-cluster routing from working correctly when `RouteTable` delegation is used in conjunction with service federation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3780)
- Fixed a bug that allowed routes to leak across listeners. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2800)
- Fixed a bug that caused incorrect workload entries to be created when using virtual destinations with hostinfooverride. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3777)
- Generate correct name for prometheus helm value docs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3877)
- Clusters exisiting across multiple workspaces will no longer trip up the graph display in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3745)
- Breadcrumbs updated, and all crumbs are now clickable. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3885)
- Graph edge details now show the correct target name. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3954)
- Clusters and workspaces having the same name is now taken into account on the graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3910)
New Features
- Add WasmDeploymentPolicy support to allow for users to specify wasm filters to be deployed into Istio. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2199)
- Nodes moved manually in the metrics graph will now be saved to their Grouped By category. Toggling will fully switch modes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3822)
- Add selected east-west gateways to workspacesettings statuses. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3483)
- Add federated services to workspacesettings statuses. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3482)

v2.1.0-beta2 (v2.1.0)

Wed, 18 May 2022 16:29:58 GMT

Fixes
- Fix gateway authorization policy creation, and a GC issue regarding multiple workspace ClusterSelectors. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3814)
- Initialize statuses for all objects in the translator (https://github.com/solo-io/gloo-mesh-enterprise/issues/3706)
- Fix a SIGSEV crash that happens when unexpected data appears in the `istio_tcp_received_bytes_total` metric in prometheus. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3602)
- Stop logging warnings about K8s Services found in non-workspace namespaces (https://github.com/solo-io/gloo-mesh-enterprise/issues/3819)
- Remove "Dependencies" section from Virtual Gateway details page (Virtual Gateways cannot be exported outside their home workspace).. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3784)
- The group of the internal `AuthConfig` CRD has been changed from `enterprise.gloo.solo.io` to `extauth.solo.io`. After upgrading to this version, the Gloo Mesh management plane will output a new set of `AuthConfig` resources with the new GVK (group/version/kind) and use them in place of the old ones, which will simply be ignored and can be manually cleaned up at the user's convenience. (https://github.com/solo-io/gloo-mesh-enterprise/3624)
New Features
- Adds the ability to rewrite the Authority/Host header to `forwardTo` routes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3327)
- Set the VirtualGateway and backing workload relationship in the status. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3477)

v2.1.0-beta1 (v2.1.0)

Mon, 16 May 2022 16:19:38 GMT

Fixes
- Update API Server to leverage resource statuses on destination resources and Route Tables to populate import/export state. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3805)
- Update Destination Discovery to handle ingress gateways using ClusterIP services. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3640)

v2.0.24 (v2.0.0)

Fri, 07 Oct 2022 15:04:35 GMT

Dependency Bumps
- solo-io/ext-auth-service has been upgraded to v0.27.0.
Fixes
- When using Cookie based session, the response headers were not set with new cookie values for the id, access, and refresh tokens when a refresh token was used to obtain new tokens. This fix ensures that the response headers are set with the new cookie values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5483)
- Fixes an NPE when session is not found during initialization of the session in ext-auth-service (https://github.com/solo-io/gloo-mesh-enterprise/issues/5483)
- Fix subtle bug in redis key cleanup logic that was improperly capturing the key variable in the loop. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5370)
- Update gloo-mesh-envoy base image from v1.20.0 to v1.23.1. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5503)

v2.0.23 (v2.0.0)

Thu, 15 Sep 2022 14:09:59 GMT

Fixes
- Made error more explicit when required status code for direct response action is unspecified (https://github.com/solo-io/gloo-mesh-enterprise/issues/5174)
- Fix cleanup logic for federation when using workspace namespace selectors. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5289)
- Create initial IssuedCertificate from RootTrustPolicy faster (https://github.com/solo-io/gloo-mesh-enterprise/issues/5303)

v2.0.22 (v2.0.0)

Tue, 13 Sep 2022 02:08:54 GMT

Fixes
- Fix stalls in RootTrustPolicy algorithm (https://github.com/solo-io/gloo-mesh-enterprise/issues/5090)

v2.0.21 (v2.0.0)

Thu, 08 Sep 2022 20:09:37 GMT

Fixes
- Fix a segfault in the UI when the metric `istio_tcp_received_bytes_total` returns data but `istio_tcp_sent_bytes_total` does not. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5233)
- Adds the ability to select namespaces by label in the workspace resource. Previously kubernetes clusters were selectable by label, but namespaces were not. For example, you can now use istio injection labels to select all namespaces with sidecars. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5072)

v2.0.20 (v2.0.0)

Thu, 08 Sep 2022 16:15:49 GMT

Fixes
- Allow named target port on Kubernetes Service definition. Previously our translator would fail if a named target port was specified on a Kubernetes Service definition, however now we allow it with an important caveat. That caveat being that there can only be 1 numbered port backing the service. If there are multiple, the system will pick the first available port. This will be fixed in a future release, but this will allow us to support named target ports in the short-term. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3571)
- Fixes a performance issue in the management server caused by excessive reads of in-memory state when propagating resources to Relay. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5155)

v2.0.19 (v2.0.0)

Fri, 02 Sep 2022 17:02:15 GMT

Extra Notes
- This release contained no user-facing changes.

v2.0.18 (v2.0.0)

Thu, 25 Aug 2022 12:44:39 GMT

Fixes
- Fix patch context in envoy filter patcher. (https://github.com/solo-io/gloo-mesh-enterprise/issues/5060)

v2.0.17 (v2.0.0)

Mon, 22 Aug 2022 13:47:41 GMT

Fixes
- Fix slow upsert time by only creating label set once, and using a shallow copy for relay snapshot. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4873)

v2.0.16 (v2.0.0)

Fri, 19 Aug 2022 19:53:41 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.22.29.
Fixes
- Make it so that connectTimeout is no longer required on ConnectionPolicy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4921)
- Fix relay configuration to make sure ConnectionPolicy is relayed correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4625)
- Ensure that empty fields in ConnectionPolicy are handled correctly in all cases. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4921)
- Fixes cases where rate limit rules could be counted multiple times when applied to the same gateway/port. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4210)
- Fix duplicate JWT filter issue where multiple JWT filters were created on a single http listener.
- Fix concurrency bug that caused some issues with statuses. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4298)

v2.0.15 (v2.0.0)

Mon, 15 Aug 2022 19:14:55 GMT

Fixes
- Fix a data race in the translator (https://github.com/solo-io/gloo-mesh-enterprise/issues/4474)
- Add resilience.policy.gloo.solo.io/v2/ConnectionPolicy to allow for the configuration of TCP keep-alive settings. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4625)
- Silence proto registration warnings (https://github.com/solo-io/gloo-mesh-enterprise/issues/4797)

v2.0.14 (v2.0.0)

Wed, 10 Aug 2022 18:04:04 GMT

Dependency Bumps
- solo-io/solo-apis has been upgraded to gloo-v1.12.0-rc5.
- solo-io/solo-kit has been upgraded to v0.30.2.
- solo-io/ext-auth-service has been upgraded to v0.20.10.
- solo-io/k8s-utils has been upgraded to v0.1.0.
Fixes
- Allows ext-auth CRD to support refresh tokens for cookies without using redis. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4338)
- Fix nil pointer panic when customAuth is used (https://github.com/solo-io/gloo-mesh-enterprise/issues/4756)

v2.0.13 (v2.0.0)

Fri, 05 Aug 2022 12:48:39 GMT

Fixes
- Appropriately restrict permissions of "Get YAML" button in the UI when a user has access to some but not all workspaces. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4642)
- Fixes query parameters being ignored in delegated route table. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4365)
- cy.js removed some styling options due to cross-browser problems, so we added them back in for our use case. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4442)
- Header and method matchers for routes on delegated RouteTables will now be taken into account and merged with the matchers on the parent route. If there is a conflict, both RTs will report a warning, and any requests matching the parent route's matchers will receive a direct response. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4457)

v2.0.12 (v2.0.0)

Wed, 13 Jul 2022 17:31:05 GMT

Fixes
- Fixes an issue in the failover policy plugin where locality settings are not being applied when the virtual destination is defined in the same workspace but in a cluster/namespace combination different from the cluster/namespace where the selected services are defined. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4394)
- Fixes a panic which triggered a crashLoopBackoff when discovery got into a bad state. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4479)

v2.0.11 (v2.0.0)

Fri, 08 Jul 2022 15:41:16 GMT

v2.0.10 (v2.0.0)

Thu, 07 Jul 2022 21:12:51 GMT

Fixes
- Fix issue related to exported virtual destinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4262)

v2.0.9 (v2.0.0)

Thu, 30 Jun 2022 15:29:25 GMT

Fixes
- Better import/export handling for rate limits and improved error handling. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3899)
- Add support for PKCS#8 rsa public keys. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4189)
- When installing with `meshctl install`, we will default to installing the same version as the CLI version. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4294)
- Fix status warning text to change "clusters" to "namespaces". (https://github.com/solo-io/gloo-mesh-enterprise/issues/4291)
- Fix relay agent unintentionally applying labels to Istio resources that are not owned by Gloo Mesh and appending said resources to the list of resources to be reconciled in the management server. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4196)
- Policy "filter by" list is now alphabetical. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4087)

v2.0.8 (v2.0.0)

Tue, 14 Jun 2022 16:06:35 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.22.17.

v2.0.7 (v2.0.0)

Wed, 08 Jun 2022 15:43:41 GMT

Fixes
- Populate the Gateway Workloads section of the Virtual Gateway details page in the UI. Improve listing of External Endpoints on the External Service details page. Improve listing of Backing Services on the Virtual Destination details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3947)
- Sort Workspace resource by import status (exported, private, imported) on the Workspace Details page of the dashboard. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4072)
- Allow Policies using Route Selection to make selections based on Name, Namespace, and Cluster. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3673)
- Fixed a bug that prevented cross-cluster routing from working correctly when `RouteTable` delegation is used in conjunction with service federation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3780)
- Fixed a bug that caused incorrect workload entries to be created when using virtual destinations with hostinfooverride. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3777)
- When there are multiple mgmt server replicas, the KubernetesCluster 'relay disconnected' status becomes meaningless. It is now removed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4043)

v2.0.6 (v2.0.0)

Tue, 31 May 2022 21:00:07 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.22.16.
Fixes
- In the Gloo Mesh Graph UI, show nodes that are receiving traffic but not sending them. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3744)
- Generate correct name for prometheus helm value docs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3877)
- Nodes moved manually in the metrics graph will now be saved to their Grouped By category. Toggling will fully switch modes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3822)
- Clusters exisiting across multiple workspaces will no longer trip up the graph display in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3745)
- Add federated services to workspacesettings statuses. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3482)
- Graph edge details now show the correct target name. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3954)

v2.0.5 (v2.0.0)

Mon, 23 May 2022 17:53:55 GMT

Fixes
- Update API Server to leverage resource statuses on destination resources and Route Tables to populate import/export state. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3805)
- Remove "Dependencies" section from Virtual Gateway details page (Virtual Gateways cannot be exported outside their home workspace).. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3784)
- Use the real state of Workspaces instead of an assumed state when displaying whether workspaces are in error. Use translation-computed statistics about the workspace instead of computing those in the apiserver. Change how available workspaces and resources are computed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3805)
- The "View YAML" button in dashboard now works if the user has access to a resource's owner Workspace or to the resource itself. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3868)
- Implement access control for cluster-centric resource views. Users have access to information about a cluster if they have access to a workspace that includes a namespace from that cluster. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2961)
- Breadcrumbs updated, and all crumbs are now clickable. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3885)

v2.0.4 (v2.0.0)

Fri, 20 May 2022 20:14:57 GMT

Fixes
- Backport to add WasmDeploymentPolicy support to allow for users to specify wasm filters to be deployed into Istio. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2199)
- Fix admin namespace being auto-included in the management cluster whenever a Workspace uses another (non-admin) namespace from the management cluster. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3870)
- Clusters and workspaces having the same name is now taken into account on the graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3910)

v2.0.3 (v2.0.0)

Wed, 18 May 2022 16:21:22 GMT

Fixes
- Fix gateway authorization policy creation, and a GC issue regarding multiple workspace ClusterSelectors. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3814)
- Fix a SIGSEV crash that happens when unexpected data appears in the `istio_tcp_received_bytes_total` metric in prometheus. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3602)
- Stop logging warnings about K8s Services found in non-workspace namespaces (https://github.com/solo-io/gloo-mesh-enterprise/issues/3819)
- The group of the internal `AuthConfig` CRD has been changed from `enterprise.gloo.solo.io` to `extauth.solo.io`. After upgrading to this version, the Gloo Mesh management plane will output a new set of `AuthConfig` resources with the new GVK (group/version/kind) and use them in place of the old ones, which will simply be ignored and can be manually cleaned up at the user's convenience. (https://github.com/solo-io/gloo-mesh-enterprise/3624)

v2.0.2 (v2.0.0)

Mon, 16 May 2022 16:28:43 GMT

Fixes
- Update Destination Discovery to handle ingress gateways using ClusterIP services. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3640)

v2.0.1 (v2.0.0)

Fri, 13 May 2022 22:22:07 GMT

Extra Notes
- This release contained no user-facing changes.

v2.0.0 (v2.0.0)

Fri, 13 May 2022 21:16:13 GMT

New Features
- Add allowed routetable <-> virtual gateway status relationship. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3472)

v2.0.0-rc2 (v2.0.0)

Fri, 13 May 2022 17:25:59 GMT

Dependency Bumps
- solo-io/rate-limiter has been upgraded to v0.6.1.
Fixes
- Errors when a RouteTable selecting workloads includes the wildcard hostname '*'. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3723)
- When creating Destinations internally, set the gvk to the original service, virtual destination, or external service gvk for reporting purposes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3282)
- Fix race condition caused by attempting to update statuses on the same resource concurrently (https://github.com/solo-io/gloo-mesh-enterprise/issues/3727)
- The metrics graph no longer occasionally loads without icons. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3486)
- Remove ClusterIP restriction from Ingress (https://github.com/solo-io/gloo-mesh-enterprise/issues/3512)
- Support multiple HostInfoOverride objects per gateway (https://github.com/solo-io/gloo-mesh-enterprise/issues/3722)
- Graphs featuring external services will no longer crash out and make a single stack of nodes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3641)
- Fixed broken docs links (https://github.com/solo-io/gloo-mesh-enterprise/issues/3761)
- Updated instructions for creating a workspace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3736)
- Initial graph load experience is now smoother. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3715)
- Fixed various small display issues at smaller window sizes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3652)
- Nodes in the metric graph which are part of a cycle are now movable. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3671)
New Features
- Added `appProtocol` option to set application protocol on virtual gateway listeners. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3442)
- Add basic statuses to types and generated code for kubernetes clusters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3425)
- Add owner workspace to route table and destination statuses. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3476)
- API Server now restricts user access to resource YAMLs. Users can only view the YAML of resources they can access. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2961)
- API Server now restricts user access to resources. In general, users will have access to resources contained in a Workspace whose WorkspaceSettings CR is accessible to them. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2961)
- Update API Server to add statuses to resource displayed on the Workspace Details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3064)
- Write translation global statuses to the Kubernetes objects. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3063)
- Detail page added for Header Manipulation policy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3310)
- Detail page added for Access Log policy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2486)
- Detail page added for WAF policy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3303)
- Detail page added for JWT policy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3302)
- Add workspace overview information (import/exports, number of policies, number of destination types) to workspace status. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3476)
- Add workspace <-> workspacesettings relationship to their respective statuses. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3481)
Extra Notes
- Note: This release is marked as `prerelease` to get around a quirk of [GitHub release ordering](https://github.community/t/release-page-not-sorting-correctly/121002) and how changelog bot determines the "latest" release. This way we will have the 2.0.0 release ranked higher, and changelog bot will work.

v2.0.0-rc1 (v2.0.0)

Thu, 05 May 2022 17:32:44 GMT

New Features
- Update API Server to populate list of policies on a given route. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3064)

v2.0.0-beta35 (v2.0.0)

Wed, 04 May 2022 23:30:31 GMT

Fixes
- reding and writing statuses to redis in a sharded mgmt deployment is now fully supported (https://github.com/solo-io/gloo-mesh-enterprise/issues/3562)
- Improves/fixes the ExternalService and VirtualDestination ports APIs, as well as unifying them to be used equivalently. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3393)
- Update graphql to allow conditional testing and add in UI tests. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3612)
- Graph edges now animate correctly on two-way traffic. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3670)
- Fix displaying unknown matcher in route tables (https://github.com/solo-io/gloo-mesh-enterprise/issues/3695)
- Add smart defaults for ingressgateways to match all without a selector for a virtual gateway if service isolation is enabled. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2806)
New Features
- Update API Server to read policies applied to destinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3064)
- Update API Server to read the destinations, routes, and workloads that policies are applied to. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3064)
- Update API Server to read resource statuses from redis. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3064)
- Implement proxy protocol functionality (https://github.com/solo-io/gloo-mesh-enterprise/issues/2079)
- Users can now dump their UI state and devs can upload to debug. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3545)
- Added placeholder UI for graphql routes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3608)

v2.0.0-beta34 (v2.0.0)

Tue, 03 May 2022 18:37:38 GMT

Fixes
- Better error handling for misconfigured east/west namespaces with federation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3357)
- Adds in a graphql section overview. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3606)
- Fix alignment of empty graph button. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3573)
- Updated the dropdown arrow icon. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3590)
- Fixed the multiselect input to show values correctly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3505)
- Updated the dropdown arrow icon on the graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3619)
- Fix gateways getting improperly cleaned up. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3649)
- Allow open new tab on Ctrl click for Gateway/Policies (https://github.com/solo-io/gloo-mesh-enterprise/issues/3591)
- Updated the sort order of the graph filter dropdown options. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3570)
- Do not segfault in `meshctl dashboard` command if the console image in the gloo-mesh-ui deployment cannot be found. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3655)
- VirtualGateway default should be to use http instead of erroring when no listener type is provided. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2254)
- Auth policies generated by Service Isolation will now use the service's TargetPort. Using targetPort name is currently not supported for auth policies. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3552)
- Fixed issue with connection error message. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3582)
- New connection error messages now supported in UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3582)
- Prevents the more-info button from disappearing on the overview page on smaller window sizes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3614)
- Updates the SWR API requests from the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3665)
- Fixed small input bug on overview name search. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3518)
- Pagination now lists "total items" on the left side. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3651)
- Ext Auth policy design updated and API hooked up. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3541)
- Route Table lists now use data from the api. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3605)
- Removed default service worker as was unused and causing bugs (https://github.com/solo-io/gloo-mesh-enterprise/issues/3653)
- Pagination in the UI has been cleared to fit screens better. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3522)
- Update status structure so that we are reporting states by workspace/cluster instead of cluster/namespace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3560)
- Move global status fields to the top level of the status object. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3560)
New Features
- Add the ability to set ResponseTransformations for TransformationPolicies. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3268)
- Added an APIs tab to the workspace details page with mock data. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3607)

v2.0.0-beta33 (v2.0.0)

Wed, 27 Apr 2022 17:18:54 GMT

Fixes
- Added the ability to disable the realy identity token creation in the mgmt plane. Also fixes when relay tokens should be watched. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3581)
- Removes duplicate WorkloadEntry for remote E/W Gateways (https://github.com/solo-io/gloo-mesh-enterprise/issues/3292)
- Clean up resources associated with workspacesettings on deletion (https://github.com/solo-io/gloo-mesh-enterprise/issues/3100)
- Fix helm templates and add tests for schema validity (https://github.com/solo-io/gloo-mesh-enterprise/issues/3464)
- Fix 1.10 and 1.9 nightly vm onboarding tests. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3412)
- Create the KubernetesCluster object before deploying gloo mesh agent (https://github.com/solo-io/gloo-mesh-enterprise/issues/3235)
- Correctly find the mgmt plane port when using meshctl register (https://github.com/solo-io/gloo-mesh-enterprise/issues/3574)
- Do not display the cli usage when the application errors and crashes (https://github.com/solo-io/gloo-mesh-enterprise/issues/3534)
- Using the find and hide filtering in the metrics graph is now more worthwhile an experience. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3500)
- Sort order arrow direction now uses more natural arrow directions. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3516)

v2.0.0-beta32 (v2.0.0)

Fri, 22 Apr 2022 21:36:44 GMT

Fixes
- Deprecate LegacyMode. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2917)
- Prometheus Server config should now only scrape from the 'gloo-mesh-mgmt-server' service, and not the 'gloo-mesh-mgmt-server-ui' service. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3448)
Helm Changes
- Remove the helm value `legacyMode` for the gloo-mesh-enterprise helm chart. LegacyMode is deprecated.
- Remove the flag `legacy-mode` from the gloo-mesh-mgmt-server.
- Rename the gloo-mesh-mgmt-server-ui service to the gloo-mesh-mgmt-server-admin service.
- Remove the relay-forwarding-identity-token-secret. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2917)
New Features
- Show traffic to non-kube service workloads and external services. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3247)
- Output translation report (errors, warnings, etc) to be used for persisting and writing resource statuses. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3295)
- Add statuses to the api and save them in redis as a snapshot (https://github.com/solo-io/gloo-mesh-enterprise/issues/3061)
- Overview page now has an option to sort workspaces and clusters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3516)

v2.0.0-beta31 (v2.0.0)

Wed, 20 Apr 2022 15:54:06 GMT

Fixes
- Disable extauth on every route which doesn't have extauth applies (https://github.com/solo-io/gloo-mesh-enterprise/issues/3491)
- Highlighting only-errors on the metrics graph in the UI now works as intended. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3242)

v2.0.0-beta30 (v2.0.0)

Tue, 19 Apr 2022 21:45:37 GMT

Fixes
- By default, only the workspace boundary is enabled for the graph (https://github.com/solo-io/gloo-mesh-enterprise/issues/3484)
- Overview pages filters fixed and doc links updated. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3480)

v2.0.0-beta29 (v2.0.0)

Tue, 19 Apr 2022 20:17:40 GMT

Fixes
- Istio Gateway objects are now created in their respective namespaces and add the hosts from within.
- Fix ExternalService missing corresponding endpoint in ServiceEntry. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3437)
- Policy links and gateway overview styling fixes (https://github.com/solo-io/gloo-mesh-enterprise/issues/3461)
- Fix issue where individual resources are being overwritten with different labels. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3436)
- Extra buttons on external service details page removed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3468)
New Features
- Add the ability to override the discovered hostname and port for an east-west gateway. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1755)

v2.0.0-beta28 (v2.0.0)

Mon, 18 Apr 2022 20:03:37 GMT

Fixes
- Fix prometheus-server configmap such that we only scrape metrics from the gloo-mesh-mgmt-server pods. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3448)
- The UI graph now properly groups clusters that exist across different workspaces. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3291)
- Virtual Destination details tables now populate with data correctly (https://github.com/solo-io/gloo-mesh-enterprise/issues/3453)
New Features
- Implememnts direct response route replacement for routes in error (https://github.com/solo-io/gloo-mesh-enterprise/issues/529)
- Rate Limit details page added. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2483)

v2.0.0-beta27 (v2.0.0)

Fri, 15 Apr 2022 20:12:22 GMT

Fixes
- Fixes the service entry protocol for federation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3429)
- Update Federated Workspace automatic ServiceEntry naming. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3223)
- Fix logic to write gloo mesh resources to management cluster. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2595)
- Fix missing WorkspaceSetting error when selecting multiple WorkspaceSetting in different namespaces on the mgmt cluster. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3250)
- Fix global WorkspaceSettings conflict on mgmt cluster. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3290)
- Gateway overview page no longer intermittently errors. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3354)
- The Policies Page of the UI now looks and behaves better. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3385)
- Remove mention of policy import / export from the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3276)
- In the UI, clicking a card on the Policies page now goes to more details about that policy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3399)
- Pages in an error state will no longer transfer that error state to other pages. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3309)
- Fixed a situation on the graph where edges weren't completely hidden when expected. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3348)
- Health indicator circles now show errors inside a tooltip on hover. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3317)
- Pagination controls no longer flicker when using filters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3401)
New Features
- Change the stage API on the JWTPolicy, TransformationPolicy, and RateLimitPolicy to use the new prioritized phase API. This API allows the user to assign a relative priority to each policy with pre and post AuthZ phases. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3289)
- Adds support for different input port and targetPort to VirtualDestinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2751)

v2.0.0-beta26 (v2.0.0)

Tue, 12 Apr 2022 14:31:42 GMT

Fixes
- The metrics graph no longer cuts the last namespace filter on auto-refresh. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3334)
- Fixed issue where extauth is applied to all routes on a listener. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3326)
- Fix upsert logic so updates to RouteTables that should delete child resources are not ignored. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3252)
- Error on workspaces that are not in the admin namespace and cluster instead of silently ignoring them. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3294)
- Removing mention of root namespace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2898)
- Destinations tables no longer flicker when searching. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3277)
- The Graph UI now connects directly to the prometheus server. This fixes the Graph UI when gloo-mesh-mgmt-server is sharded with >1 replicas. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2646)
- Ext Auth policy details page mockup added. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2484)
- Edge tab on the graph now shows the correct mTLS status. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3352)
- Links on detail pages now link to the proper workspace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3339)
- Workspace urls no longer require the workspace namespace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3347)
- Perform lookup if VirtualGateway listener port spec refers to gateway ports by name instead of number. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2824)
- Prefer running istop Gateway Servers on targetPort, if defined (https://github.com/solo-io/gloo-mesh-enterprise/issues/3166)
New Features
- Allow import/export of ExtAuthServer and RateLimitServerConfig objects from WorkspaceSettings. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3360)

v2.0.0-beta25 (v2.0.0)

Thu, 07 Apr 2022 15:22:22 GMT

Fixes
- Allow all client identities to access destination when AccessPolicy authz is empty. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3020)
- Implement SNI Match for VirtualGateway policies. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2078)
- Clicking an edge now works as intended. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3307)
- An issue with graph refresh behavior has been resolved. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3241)
- Fixes the workload selector so it is evaluated against the GW service, not the internal DiscoveredGateway object itself. Also added selector match for name. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3098)
New Features
- Implements direct response functionality (https://github.com/solo-io/gloo-mesh-enterprise/issues/2426)
- Update the Graph UI filters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3238)
- If dashboard auth filtering is set up (e.g. the authz.multiClusterRbac field is set), update the graph filters to show only the workspaces, namespaces, and clusters the user is allowed to see. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3184)
- The UI gives a better indication on the metric graph when there are no workspaces' whose data can be displayed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3236)
- Add optional concurrency to the gloo mesh translator. This can be enabled by passing the flag `--concurrent=` to the mgmt-server. Alternatively this value can be enabled by setting the `glooMeshMgmtServer.concurrency=` Helm value. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3266)
- Update the Graph UI filters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3083)
- Policies are now applied to imported routes automatically (https://github.com/solo-io/gloo-mesh-enterprise/issues/3153)
- Implement meshctl vm onboard and meshctl vm check for onboarding virtual machines through the meshctl workflow. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2400)

v2.0.0-beta24 (v2.0.0)

Fri, 01 Apr 2022 14:34:44 GMT

Fixes
- Details of edges in the graph are back to displaying the correct request data. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3207)
- Fix bug with multiple EastWestGatewaySelectors preventing WorkloadEntries from being created. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3246)
- Fix bug with local translation context missing east-west gateway destination in workspace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3233)
New Features
- Enable fine-grained import and export of resources across workspaces. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2830)
- Add JWTPolicy to allow enabling of JWT Authentication and ClaimToHeaders. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2040)

v2.0.0-beta23 (v2.0.0)

Wed, 30 Mar 2022 12:12:34 GMT

Fixes
- Nodes in the metrics graph will no longer overlapping stack on initial load when some of them are idle. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3208)
New Features
- Add integration test and examples for routing from a in-mesh service to an external service. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3228)
- The options for how to display grouping boxes on the metrics graph have been enhanced. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3115)

v2.0.0-beta22 (v2.0.0)

Tue, 29 Mar 2022 17:08:59 GMT

Fixes
- Discovered gateways should be able to distinguish between ingress and egress gateways during translation by setting the GatewaySelector in the WorkspaceSettings. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2770)
- East-west gateway is not required to be part of workspace for virtual destination translation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2915)
- Additional debug logging during agent bootstrapping. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2763)
- Set resolution field for ServiceEntries generated by a external services. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3169)
- Graphs featuring some hidden, but not all, Idle nodes will now show edges properly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3208)
- Remove trim_proxy_config from AccessPolicy, and instead make it a part of ServiceIsolation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3160)
New Features
- Make the auth filter work in the graph view. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3184)
- Implement Inja style JSON transformations. This allows users to modify the header/body using the inja JSON templating language. This functionality can be accessed using the TransformationPolicy CRD. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2183)
- Implement header manipulation policy. This functionality can be accessed using the HeaderManipulationPolicy CRD. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2181)

v2.0.0-beta21 (v2.0.0)

Wed, 23 Mar 2022 21:37:41 GMT

Fixes
- Update install script so that users on arm64 machines can download meshctl arm64 binaries. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3050)
New Features
- Add WAF capabilities to Gloo Mesh Enterprise via the WAFPolicy API. (https://github.com/solo-io/gloo-mesh-enterprise/issues/532)
- Add the meshctl demo command. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2367)

v2.0.0-beta20 (v2.0.0)

Tue, 22 Mar 2022 19:11:33 GMT

Dependency Bumps
- solo-io/rate-limiter has been upgraded to v0.6.0.
Fixes
- Fix issue causing workloads not appear in the api-server when the workload cluster is the same as the management cluster. (none)
- Root namespace highlighting for clusters now ensures cluster name matches. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2898)
New Features
- Publish amd64 and arm64 meshctl binaries after each release. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3050)
- Virtual gateway is now supported in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2489)

v2.0.0-beta19 (v2.0.0)

Fri, 18 Mar 2022 18:57:44 GMT

Extra Notes
- This release contained no user-facing changes.

v2.0.0-beta18 (v2.0.0)

Fri, 18 Mar 2022 16:44:27 GMT

Fixes
- Fix issue causing EnvoyFilters' repeated creation which causes load on istio and kubernetes (https://github.com/solo-io/gloo-mesh-enterprise/issues/2928)
- Fixed the outdated content in the "Add New Cluster" modal. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3002)
- Fixes BINARY_NAME usage in Makefile.docker to respect value of GOARCH (https://github.com/solo-io/gloo-mesh-enterprise/issues/3071)
- Don't set onlyUITests flag when running on main branch. (none)
- Make workspaces pass validation when workload cluster is the management cluster. (none)
- Fix mgmt-server crash when the --prometheus-server flag is left empty. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2748)
- Toggling layout settings in the UI graph will no longer lead to phantom visuals. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3016)
New Features
- Add back in access log forwarding from the workload clusters to the management server and enable the AccessLogPolicy plugin. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2342)
- Enables closing all modals with escape key (https://github.com/solo-io/gloo-mesh-enterprise/issues/2980)
- Enables MirrorPolicy functionality (https://github.com/solo-io/gloo-mesh-enterprise/issues/2180)
- Shard translation outputs by active clusters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2539)
- The metrics graph in the UI now allows you to hide all nodes (hidden by default). (https://github.com/solo-io/gloo-mesh-enterprise/issues/3037)
- Mirror policy is now supported. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2479)
- CORS policy is now supported. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2478)
- CSRF policy is now supported. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2482)

v2.0.0-beta17 (v2.0.0)

Fri, 11 Mar 2022 20:46:06 GMT

Fixes
- Resolve policy conflicts for destination-selecting policies in the destination details page and policies details page handlers. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2948)
- Fix resources not being properly deleted in redis. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2971)
- Root namespace fields are now populated correctly from the WorkspaceSettings resource. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2898)
- Remove secrets from redis. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3034)
- Nodes in the metrics graph are now drawn with better positioning for most cases. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3017)
- Dragging boxes in the metrics graph now works as intended more often. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3018)
- Implement validation of unique hostnames across GM Destinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2753)
New Features
- Re-add `meshctl version` command. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2373)
- Re-add `meshctl install` and `meshctl uninstall` command. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2372)
- Re-add `meshctl dashboard` command. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2364)
- Re-add `meshctl cluster` commands. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2363)
- Re-enable generated CLI docs for meshctl. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2369)
- Automatic Sidecar generation based on Workspaces (https://github.com/solo-io/gloo-mesh-enterprise/issues/1954)

v2.0.0-beta16 (v2.0.0)

Thu, 10 Mar 2022 13:22:41 GMT

Dependency Bumps
- solo-io/external-apis has been upgraded to v0.1.13.
Fixes
- Populate list of external endpoints in the handler method for the external service details page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2495)
New Features
- Define the Gloo Mesh UI graph filtering behavior as follows: When a workspace A is selected, but no namespace or clusters selected, we will show all the traffic in that workspace A. When a workspace A is selected, namespace B is selected, but no cluster is selected, we will show all traffic in namespace B in all clusters in workspace A. When workspace A, namespace B, and cluster C is selected, we will only show traffic in namespace B of cluster C in workspace A. When no workspace is selected, namespace B is selected, and no clusters are selected, we will show all the traffic in namespace B in all clusters. When no workspace or namespace is selected, and cluster C is selected, we will show all traffic in cluster C. When no workspace is selected, but namespace B and cluster C is selected, we will show all traffic in namespace B and cluster C. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3022)

v2.0.0-beta15 (v2.0.0)

Tue, 08 Mar 2022 16:53:36 GMT

Fixes
- Only show workspace-owned resources on the workspaces column of the overview page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2998)
- Show resources that are exported by default as exported in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2999)

v2.0.0-beta14 (v2.0.0)

Tue, 08 Mar 2022 00:48:38 GMT

Extra Notes
- This release contained no user-facing changes.

v2.0.0-beta13 (v2.0.0)

Mon, 07 Mar 2022 18:13:02 GMT

Fixes
- Include workload SPIFFE IDs in the generated DestinationRules' subjectAltName list (https://github.com/solo-io/gloo-mesh-enterprise/issues/2883)
- In general, most resource references should not have a namespace. This removes the namespace from the dashboard's client secret reference. (https://github.com/solo-io/gloo-mesh-enterprise/pull/2958)
- Find/Hide text being clipped in search box has been fixed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2935)
New Features
- Implementation for the view YAML modal on destination details pages (https://github.com/solo-io/gloo-mesh-enterprise/issues/2878)

v2.0.0-beta12 (v2.0.0)

Thu, 03 Mar 2022 22:00:41 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.22.11.
Fixes
- Fix federation not working across workspace boundaries (https://github.com/solo-io/gloo-mesh-enterprise/issues/2976)
- Fixes 2nd time OIDC login issue, caused by caching the log-in page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1934)
- Do not graph unknown nodes. The 'unknown' traffic comes from normal pods inside the Kubernetes cluster that do not have the Envoy sidecar deployed and which are thus not part of the mesh. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2929)
- Update mgmt-server and ui to use redis as default persistence layer. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2862)
- Retry connections to the redis cache. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2862)
- Graph no longer calls an empty result an error. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1571)
- Changing pages now resets the scrollbar to the top of the page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2803)
- VirtualGateway selector should be an ObjectSelector to enable selecting gateways from specific clusters and namespaces. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2847)
New Features
- Enables CSRFPolicy functionality (https://github.com/solo-io/gloo-mesh-enterprise/issues/2178)
- Propagate RBAC Resources from managed cluster, and use them in the apiserver to make auth decisions. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2228)

v2.0.0-beta11 (v2.0.0)

Tue, 01 Mar 2022 15:51:23 GMT

Fixes
- When service isolation is enabled, output AuthorizationPolicies and PeerAuthenticationPolicies only for the relevant workspace context instead of all workspace contexts. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2852)
New Features
- Enable cross-cluster communication via federation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2163)

v2.0.0-beta10 (v2.0.0)

Mon, 28 Feb 2022 16:04:31 GMT

Fixes
- Fix applying v2 policies to east-west route tables. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2839)
- When we ask for node metrics and edge metrics within a specific boundary, we may have edges reaching outside of our boundaries. When this happens, we will render that node. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2875)
- Fixes panic when RatelimitServerConfig has invalid destination. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2879)
New Features
- Implements v2 AccessLogPolicy api translation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2172)

v2.0.0-beta9 (v2.0.0)

Thu, 24 Feb 2022 22:49:13 GMT

Fixes
- Updates gloo-mesh-agent default serviceType to ClusterIP. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2787)
- Fixes bug where AuthConfig resource is not deleted when ExtAuthServer and ExtAuthPolicy are. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2783)
- Add a simple HTTP healthcheck for AWS load balancer. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2856)
- Update the Helm docs to reflect the updated gloo-mesh-enterprise helm chart values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2821)
- Enable localityLbSetting when FailoverPolicy config or mappings are excluded (https://github.com/solo-io/gloo-mesh-enterprise/issues/2808)
- Fixes selectors for rate-limiter server. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2777)
- Fixes health always being in bad state in some areas. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2849)
New Features
- Add outlier detection policy translation (https://github.com/solo-io/gloo-mesh-enterprise/issues/2176)
- Virtual destination now support mutliple service/external service selectors. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2799)

v2.0.0-beta8 (v2.0.0)

Wed, 23 Feb 2022 17:10:25 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.22.10.
Helm Changes
- Coalesce mgmt helm chart. Anything that had global in it before no longer needs it.
- Move the `glooMeshMgmtServer.prometheusUrl` field to a top-level `prometheusUrl`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2821)
- The default value for the helm value `mgmtClusterName` will be set to 'mgmt'. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2841)
New Features
- Rename the dashboard pod to `gloo-mesh-ui`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2821)

v2.0.0-beta7 (v2.0.0)

Wed, 23 Feb 2022 13:08:04 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.22.8.
- solo-io/external-apis has been upgraded to v0.1.12.
Fixes
- Fix the exportTo field of VirtualDestination outputs when generating in backing cluster. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2772)
- Fix error message when istio gateway is missing tls port. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2669)
- Fix crash on invalid workspace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2768)
New Features
- Add destination locality-based failover policy that allows configuration of routing failover and weighted distributions. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2174)

v2.0.0-beta6 (v2.0.0)

Thu, 17 Feb 2022 21:32:57 GMT

Helm Changes
- Rename `.Values.cluster` in the gloo-mesh-mgmt-server chart to `.Values.global.mgmtServerClusterName`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2639)

v2.0.0-beta5 (v2.0.0)

Thu, 17 Feb 2022 14:16:04 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.22.7.
Fixes
- Remove the grpcui and stats port from the LoadBalancer gloo-mesh-mgmt-service Service, and set them on an admin gloo-mesh-mgmt-service-ui Service instead. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2573)
- Fix generation of DestionationRules for VirtualDestinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2721)
- Fix panic on nil authn policy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2671)
- Fix principal translation for Access Policy. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2722)
- Fix creation of workload entries across workspaces. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2722)
- Fix prometheus queries to format them correctly and handle empty input. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2550)
- Fix race condition in apiserver from controller-runtime. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2536)
Helm Changes
- `$.Values.metricsBackend.prometheus.enabled` used to enable the prometheus server subchart is now `$.Values.prometheus.enabled` `$.Values.metricsBackend.prometheus.url` used to configure the prometheus server URL is now `$.Values.prometheusUrl` (https://github.com/solo-io/gloo-mesh-enterprise/issues/2397)
New Features
- Implement FaultInjection policy support to allow specifying faults (latency and errors) to a specified selection of routes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2175)
- Pulled in the GM 1.2 metrics observability feature into the new version of GM so that we are now registering and starting the GM metrics sink and source servers. This enabled the forwarding of metrics from the agents to the management server; which then stores that data into the prometheus server. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2397)
- Added agent `grpc` port as default port for requests. This includes exposing the port with the `glooMeshAgent.ports.grpc` Helm value and the addition of the `--grpc-port` agent run command. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2397)
- Renamed the `gm_workload_ref` and `destination_workload_ref` metrics labels to `workload_id` and `destination_workload_id`, respectively. These labels provide a unique identifier for given Envoy workload and includes the name, namespace, and cluster for that workload. Note that we will be grouping workloads of different kinds (deployment, daemonset, statefulset, etc) that have the same identifier. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2397)
- Renamed the `--relay-port` mgmt server command arg to `--grpc-port`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2397)
- API v2 ratelimit feature for routes and destinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2151)
- Implement RetryTimeout policy support to allow specifying retries and timeouts to a specified selection of routes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2171)
- Adds the ability to automatically enforce Istio identity-based authorization across workspace boundaries. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2157)

v2.0.0-beta4 (v2.0.0)

Wed, 09 Feb 2022 18:37:30 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.22.5.
Fixes
- Add a timeout when the apiserver attempts to dial the management server for the first time. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2558)
- Generate helm docs for different components for different minor versions of Gloo Mesh Enterprise. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2498)
- Add the `gloo-mesh-mgmt-server-ui` service exposing port 11100. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2573)
- Add the KubernetesCluster CR to the RBAC list of watched CRs by the dashboard pod. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2573)
Helm Changes
- Rename --networking-admin-address to --mgmt-server-ui-address. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2573)
- Rename `.Values.glooMeshAgent.ports.metrics` to `.Values.glooMeshAgent.ports.stats` with a default value of 9091. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2573)
- Rename `.Values.glooMeshMgmtServer.ports.metrics` to `.Values.glooMeshMgmtServer.ports.stats` with a default value of 9091. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2573)
- Add `.Values.glooMeshMgmtServer.ports.healthcheck` with a default value of 8090. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2573)
- Add `.Values.glooMeshMgmtServer.ports.grpc` with a default value of 9900. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2573)
- Add `.Values.glooMeshMgmtServer.ports.grpcUI` with a default value of 11100. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2573)
- Updates helm install defaults for the agent: relay.authority will be set to "gloo-mesh-mgmt-server.gloo-mesh" and ext-auth-service and rate-limiter will be disabled. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2149)
New Features
- Add the apiserver Graph API used between the apiserver and the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2397)

v2.0.0-beta3 (v2.0.0)

Mon, 07 Feb 2022 17:23:23 GMT

New Features
- Allow vault secrets to be added via mount. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2010)

v2.0.0-beta2 (v2.0.0)

Wed, 02 Feb 2022 22:10:23 GMT

New Features
- Add error reporting during GM resource translation (https://github.com/solo-io/gloo-mesh-enterprise/issues/2293)

v2.0.0-beta1 (v2.0.0)

Wed, 02 Feb 2022 14:26:34 GMT

Fixes
- Update VirtualHost translations for handling zero FaultInjection percentage. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2103)
- Update VirtualHost translations for handling default Mirror percentage. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2331)
- Fixed graph not auto refreshing over time. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2349)
- The network graph now displays items better when they verically align. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2454)
New Features
- Add the Dashboard auth reconciler to the gloo mesh apiserver. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2249)
- Add the Dashboard CRD to the admin.gloo.solo.io/v2 package. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2249)
- API: Refine object selector semantics for fine-grained selection. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2166)
- API: Support filtering which route tables can be attached to Virtual Gateways by labels and workspace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2307)

v1.3.0-beta-vmonboarding1 (v1.3.0)

Mon, 24 Jan 2022 15:17:02 GMT

New Features
- New `meshctl` command to onboard a virtual machine into the mesh. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1877)

v1.3.0-beta8 (v1.3.0)

Tue, 18 Jan 2022 19:13:03 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.22.0.
- solo-io/cue has been upgraded to v0.4.3.
Fixes
- Updates IstioOperator value translated by the IstioLifecycleManager so that there is only ever a single validation webhook configured during a canary upgrade (https://github.com/solo-io/gloo-mesh-enterprise/issues/2136)
- Update VirtualHost translations for handling empty FaultInjection percentage. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2103)
- TLS DestinationRules are now created for HTTPS external services. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1961)
- Fixes 2nd time OIDC login issue, caused by caching the log-in page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1934)
- Fixed UI bug when viewing traffic policies without a kube service `subsetMap`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2212)
New Features
- Add support for inja transformations for gloo mesh gateway (NS only) (https://github.com/solo-io/gloo-mesh-enterprise/issues/533)
- Additional `meshctl` commands that use the meschtl config file (`meshctl install`, `meshctl cluster register`, `meshctl cluster deregister`) now accept an optional `-c` argument that sets the location of the config file. Executing one of these commands will create the config file and any parent directories if they do not exist (in either the specified location or the default config file location). (https://github.com/solo-io/gloo-mesh-enterprise/issues/1918)

v1.3.0-beta7 (v1.3.0)

Tue, 04 Jan 2022 16:33:51 GMT

Dependency Bumps
- solo-io/wasm-kit has been upgraded to v0.1.4.
Fixes
- Edges within the Metrics graph should now have even fewer cases where they intersect unrelated nodes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1996)
- Closing legend/settings on the graph via the x button no longer leaves a gap. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2125)
- Namespace and cluster containers on the graph are now draggable. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2051)
- Latency table added to node tab on graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2084)
- Graph initial scale and resize-to-fit scale are now consistent and fit better. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2070)
- TCP now disabled on graph by default - can be enabled via Layout Settings. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2112)
New Features
- Add requestIpMatcher so that AccessPolicies can match based on X-Forwarded-For IP addresses (https://github.com/solo-io/gloo-mesh-enterprise/issues/1947)

v1.3.0-beta6 (v1.3.0)

Thu, 16 Dec 2021 20:03:49 GMT

Dependency Bumps
- solo-io/rate-limiter has been upgraded to v0.5.6.
Fixes
- Fix nil panic in localized plugin from caller rather than in underlying function. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1938)
- Fix nil panic when Destination contains no Ref. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1983)
- Node tab now shows the health of edges, and shows if they are bi-directional. Also made the nodes connected to those edges clickable to view thier workload details. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1874)
- Graph now caches previous settings and node positions. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2021)
- Edge tabs on the graph now show health of source and target nodes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1874)
- Graph now displays a separate icon for gateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2006)
- Fixed visual bug on graph caused by a specific combination of settings. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2016)
New Features
- CRD v1beta1 is deprecated. Bump rate-limiter CRDs to v1 to support k8s v1.22. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1853)
- Exposes an HTTP port for AWS load balancer health checks. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1504)

v1.3.0-beta5 (v1.3.0)

Tue, 30 Nov 2021 17:26:40 GMT

Fixes
- Workload Entries and Envoy Sidecars added to debug page. Tabs on debug page have been redesigned to appear on the side. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1904)
- Fixing crash caused by http metrics not existing on a workload (https://github.com/solo-io/gloo-mesh-enterprise/issues/1990)
- The UI is now less intensive in cases where data is not updating as often. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2001)
- Validate VirtualDestination hostnames so that short hostnames are correctly marked as invalid. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1910)

v1.3.0-beta4 (v1.3.0)

Wed, 24 Nov 2021 19:07:05 GMT

Fixes
- Validate that gateways are not included in the same Istio installation (IOP spec) as the Istio control plane. In this case, an the IstioLifecycleManager will be in the failed state. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1672)
- Managed Istio resources are installed in the istio-system namespace by default (https://github.com/solo-io/gloo-mesh-enterprise/issues/1797)
- Workload Entries and Envoy Sidecars added to debug page. Tabs on debug page have been redesigned to appear on the side. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1904)
- Edges between nodes of the Observability Graph no longer should be on the same x/y plane. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1908)
- Istio root namespace is no longer overriden by the IOP namespace value when using Gloo Mesh managed installations (https://github.com/solo-io/gloo-mesh-enterprise/issues/1773)
- Discovery address is merged into the Gloo Mesh managed IOP spec if it's not defined already (https://github.com/solo-io/gloo-mesh-enterprise/issues/1772)
- meshctl cluster configure interactive mode now supports kube-config paths containing environment variables ($HOME, $USER) and tildes (~). (https://github.com/solo-io/gloo-mesh-enterprise/issues/1800)
- Added reminder that meshctl check server can take some time to query (https://github.com/solo-io/gloo-mesh-enterprise/issues/1533)
New Features
- Upgrade Istio using Canary upgrades for IstioLifecycleManager minor upgrades (https://github.com/solo-io/gloo-mesh-enterprise/issues/1671)
- Within the UI Observability Graph, the cursor now provides added context about what is clickable. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1962)

v1.3.0-beta3 (v1.3.0)

Fri, 19 Nov 2021 14:55:11 GMT

Fixes
- Update extauth dependency to pick up CRD V1. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1853)
- Add a host header rewrite for generated Istio VirtualServices that route to static destinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1763)
- Fix nil deref error in `sets.Key()`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1938)
- Display a name.namespace convention instead of a name.namespace.cluster convention for policy sources. (https://github.com/solo-io/gloo-mesh-enterprise/issues/927)
- Fixes bug in support for multiple roots for relay certs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1759)
- Graph edges now animate, instead of playing animation over it. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1945)
- Small visual polish and bug fixes (https://github.com/solo-io/gloo-mesh-enterprise/issues/1901)
- graph mTLS icon color is now connected to mTLS status, not edge status (https://github.com/solo-io/gloo-mesh-enterprise/issues/1785)
New Features
- Enable the UI to graph TCP traffic, displaying bytes sent and received by each workload. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1925)
- Upgrade Istio in place for IstioLifecycleManager patch upgrades (https://github.com/solo-io/gloo-mesh-enterprise/issues/1670)
- Add HTTP request/response XSLT transformations to Gloo Mesh Gateway. (https://github.com/solo-io/gloo-mesh/issues/1841)

v1.3.0-beta2 (v1.3.0)

Fri, 12 Nov 2021 16:47:29 GMT

Breaking Changes
- Update the Istio lifecycle CR to include options for upgrades and resource cleanup. The IstioInstallation CR is changed to IstioLifecycleManager. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1669)
Fixes
- Update `meshctl install` and `meshctl cluster register` to set the namespace of the installation when they create / update the `meshctl` config file. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1578)
- Fix the label location in the WorkloadEntry created by a Virtual Destination. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1780)
- The observability graph has the first of new icons, to enhance usability and accessibility. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1784)
- Graph details tab had design updated (https://github.com/solo-io/gloo-mesh-enterprise/issues/1868)
New Features
- Graph now shows a small summary of a node on hover. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1766)
- Allow configuration of circuit breaker ("ConnectionPool" in Istio) using traffic policies. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1223)

v1.3.0-beta1 (v1.3.0)

Mon, 08 Nov 2021 13:06:38 GMT

Breaking Changes
- Change the IstioInstallation API so that it accepts a list of IstioOperator specs (https://github.com/solo-io/gloo-mesh-enterprise/issues/1665)
Dependency Bumps
- istio.io/istio has been upgraded to v0.0.0-20211019135535-77e71d7074d8.
Fixes
- Include clusterName values in the IstioOperator spec for IstioInstallations (https://github.com/solo-io/gloo-mesh-enterprise/issues/828)
- Update IstioOperator CRD API version from v1beta1 to v1 (https://github.com/solo-io/gloo-mesh-enterprise/issues/1829)
- Allow `enterprise` as an additional no-op argument to `meshctl` commands. This maintains backwards compatibility with the former `meshctl` command structure. The `enterpise` argument is deprecated and should be dropped going forward. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1768)
- Include rootNamespace override to fix Istio 1.8.6 installations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1579)
- Re-enable garbage collection on final cluster deregistration. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1521)
- Change type used for IstioOperator global config to allow merging in existing values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1662)
- Re-enable tests for static VirtualDestination for destinations with no subsets set and provide error when subset configured. (https://github.com/solo-io/gloo-mesh-enterprise/issues/650)
- Fix VirtualDestinations to use SubjectAltNames in output istio DestinationRules so that meshes with different trust domains will still work with cross-cluster traffic. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1701)
- Graph controls moved into a toolbar at the bottom of the graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1695)
- Graph header dropdown design changed (https://github.com/solo-io/gloo-mesh-enterprise/issues/1729)
- Graph edge mTLS icon changed, and icon added for missing mTLS (https://github.com/solo-io/gloo-mesh-enterprise/issues/1690)
- Graph search boxes combined into single search box with dropdown. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1687)
- Fixed issue preventing edge tab from updating when switching between edges on same node (https://github.com/solo-io/gloo-mesh-enterprise/issues/1666)
- `meshctl cluster configure` now correctly lists contexts rather than cluster names for the context prompt. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1801)
- Fix mtls query to properly get security info despite data issues. Anomalous data resulted in creation of https://github.com/solo-io/gloo-mesh-enterprise/issues/1806. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1551)
- Padding added to pagination controls (https://github.com/solo-io/gloo-mesh-enterprise/issues/1572)
- Fix policy filtering to apply name filtering to mesh-less resources. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1624)
- Fix promQL queries behind graph data to use same time interval between node and edge queries, and to exclude 'unknown' workloads. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1553)
- Tables with filters now don't remove all data in-between loads when filters are changed (https://github.com/solo-io/gloo-mesh-enterprise/issues/1570)
- It's no longer possible to end up on a blank, 'dead' Admin sub-page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1562)
- Ensure the icons on the overview page are a consistent color. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1561)
- Checkboxes are now aligned properly on filters of the Policy page in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1569)
- Ensure that border radius is consistent across tables in the Virtual Mesh section of the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1566)
- Virtual Gateway ingressGatewaySelectors must select at least one Destination to be valid. The destinationSelectors must be of a Kube Service type. Add a warning if a Virtual Gateway ingressGatewaySelector does not select a Destination. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1441)
- Fix the formatting of a generated WorkloadEntry label so that it does not end with a '.'. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1780)
- Fixed wasm filter modal not closing. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1567)
New Features
- Allow for a destination to use internal node IP when a cluster is deployed in a private subnet. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1568)
- Update `meshctl` to simplify installation and interaction with Gloo Mesh Enterprise and remove Community-related features. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1157)
- A toggle is now available for the graph in the UI which can help highlight error nodes and connections. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1688)
- Add support for istio 1.11.x to meshctl demo (https://github.com/solo-io/gloo-mesh-enterprise/issues/1841)
- Add meshctl command for creating an IstioInstallation CR (https://github.com/solo-io/gloo-mesh-enterprise/issues/853)
- Layout settings are now settable for the Observability Graph in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1689)
- The `meshctl cluster configure` command now starts by creating an empty configuration file in the target location if none exists. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1531)
- Allow for scaling of enterprise agent. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1564)
- ServiceDependencies with no destinationSelectors will now result in Istio Sidecar resources with the "~/*" host, which can be used to completely trim the configuration for sidecars that simply receive traffic and respond, but make no outbound connections of their own. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1364)
- Istio Sidecar resources will now restrict the namespaces of egress hosts for external destinations based on the destination's `exportTo` field. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1409)
- The observability graph in the UI now features alternative layouts. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1499)
- Show Gloo Mesh version in the UI footer. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1712)
- Allow for traffic shifting using traffic policies which target Virtual Destiations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1576)

v1.2.30 (v1.2.0)

Mon, 18 Jul 2022 15:53:05 GMT

Fixes
- Make VirtualGateway EnvoyFilter translation more unique to avoid collision when attaching multiple VirtualGateways to a single Istio Gateway. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4513)

v1.2.29 (v1.2.0)

Wed, 13 Jul 2022 12:17:30 GMT

Fixes
- Generate name for DirectResponse routes when no name is configured. (https://github.com/solo-io/gloo-mesh-enterprise/issues/4402)

v1.2.28 (v1.2.0)

Fri, 17 Jun 2022 15:46:34 GMT

Fixes
- External Service Destinations should now have the service entries that were created as a result of translation added to the status field. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2934)
- Direct Response actions should now match only intended routes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3647)
- Updates TrafficPolicy logic to omit extraneous warnings for non Kube-Service Destinations that have not been selected. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3970)

v1.2.27 (v1.2.0)

Thu, 19 May 2022 20:34:30 GMT

Fixes
- Remove ClusterIP restriction from Ingress (https://github.com/solo-io/gloo-mesh-enterprise/issues/3512)

v1.2.26 (v1.2.0)

Thu, 28 Apr 2022 18:23:17 GMT

Fixes
- Prevent ExtAuthz configuration from applying to all routes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3111)

v1.2.25 (v1.2.0)

Fri, 01 Apr 2022 20:57:07 GMT

Fixes
- Use targetPort for gateway binding when available. (https://github.com/solo-io/gloo-mesh-enterprise/issues/3166)
- Improves startup and discovery performance of the enterprise agent by creating an index for the list of pods. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2888)
- Allows the creation of multiple connectionHandlers on VirtualGateways, with the primary use case being support for SNI with separate certs per connectionHandler serving different hosts (https://github.com/solo-io/gloo-mesh-enterprise/issues/1092)
- Implement the ability to set an explicit external IP address and port to be used as the ingressGateway for a virtualMesh. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1755)

v1.2.24 (v1.2.0)

Fri, 25 Mar 2022 14:33:07 GMT

Dependency Bumps
- solo-io/rate-limiter has been upgraded to v0.6.0. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2291)
Fixes
- Additional debug logging during agent bootstrapping. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2763)
- Implements invalid route policies (e.g. replacement, dropping bad routes) for invalid routes, rather than producing invalid VirtualServices. Note: The default behavior is now to stop translation when an invalid route is discovered, which effectively means that one bad route in a VirtualHost implies that none of the routes in that virtual will be translated. To degrade gracefully, you'll need to define an invalidRoutePolicy as an option on VirtualHosts to either drop individual invalid routes, or replace them (i.e. with a direct 404 response) (https://github.com/solo-io/gloo-mesh-enterprise/issues/3078)

v1.2.23 (v1.2.0)

Thu, 10 Mar 2022 16:31:32 GMT

Fixes
- Enable mutliple replicas of enterprise-agent to run simultaneously. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2562)
- Adds an options field to the external service with a field called autoHostRewrite. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2463)

v1.2.22 (v1.2.0)

Mon, 07 Mar 2022 18:26:58 GMT

Fixes
- Remove certificate targets from restart logic. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2974)

v1.2.21 (v1.2.0)

Wed, 02 Mar 2022 22:56:42 GMT

Fixes
- Add Hot-Reload to Enterprise-Agent to automatically pickup Certificate updates. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1844)
- Adds a destinationPorts field to TrafficPolicy that can limit that policy's applicability to only the specified ports (https://github.com/solo-io/gloo-mesh-enterprise/issues/1616)
- Adds zone (and potentially subzone) on WorkloadEntries when all remote services are in same zone (https://github.com/solo-io/gloo-mesh-enterprise/issues/2757)
Extra Notes
- ** Marked as prerelease because of https://github.com/solo-io/gloo-mesh-enterprise/issues/2974 **

v1.2.20 (v1.2.0)

Wed, 02 Mar 2022 15:30:17 GMT

Fixes
- Refactor API export logic entirely into Makefile instead of GH actions (https://github.com/solo-io/gloo-mesh-enterprise/issues/2913)

v1.2.19 (v1.2.0)

Fri, 25 Feb 2022 23:55:11 GMT

Fixes
- API export now exports solo-io/cue rather than cuelang.org/go, due to dependency change (https://github.com/solo-io/gloo-mesh-enterprise/issues/2764)
- Add secret mount for secure Vault integration. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2010)

v1.2.18 (v1.2.0)

Fri, 18 Feb 2022 18:45:21 GMT

Extra Notes
- This release contained no user-facing changes.

v1.2.17 (v1.2.0)

Thu, 17 Feb 2022 17:07:56 GMT

Fixes
- Adds support for "discovery.mesh.gloo.solo.io/enabled": "false" annotation on Services,

v1.2.16 (v1.2.0)

Mon, 14 Feb 2022 19:14:21 GMT

Extra Notes
- This release contained no user-facing changes.

v1.2.15 (v1.2.0)

Thu, 10 Feb 2022 21:19:28 GMT

Fixes
- Add Readiness Probe to Enterprise-Agent. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2319)

v1.2.14 (v1.2.0)

Thu, 10 Feb 2022 17:54:09 GMT

Dependency Bumps
- isto/istio has been upgraded to v1.11.5.
- solo-io/skv2 has been upgraded to v0.22.0.
- solo-io/cue has been upgraded to v0.4.3.
Fixes
- fix issue where multiple target ports are the same (https://github.com/solo-io/gloo-mesh-enterprise/issues/2613)
- Stop creating an east west endpoint per backend pod and instead only for e/w gateways. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1914)
- Use kubernetes service ports for flat networking. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2252)
- Fixes validation logic for virtual gateways using virtual destinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2600)
- Bump istio APIs to v1.11.5, in order to accommodate new values added to an EnvoyFilter enum (https://github.com/solo-io/gloo-mesh/issues/1935)
- Better logging when users are denied access due to RBAC. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2560)

v1.2.13 (v1.2.0)

Thu, 03 Feb 2022 19:10:53 GMT

Fixes
- Multi-cluster routing will now generate an error to indicate the absence of a properly-configured VirtualMesh (https://github.com/solo-io/gloo-mesh-enterprise/issues/1086)
- The network graph now displays multiple namespaces on same verical axis better. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2454)

v1.2.12 (v1.2.0)

Mon, 31 Jan 2022 17:55:35 GMT

Fixes
- Update VirtualDestination translator handling of empty ServiceAccounts. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1898)
- Update VirtualDestination port translation to use TargetPort for port mapping. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2430)
Helm Changes
- Update redis dependency to use the correct value for toggling redis redeployments. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1508)

v1.2.11 (v1.2.0)

Fri, 21 Jan 2022 18:02:21 GMT

Fixes
- Fixed graph not auto refreshing over time. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2349)

v1.2.10 (v1.2.0)

Thu, 20 Jan 2022 18:30:18 GMT

Fixes
- Update VirtualHost translations for handling default FaultInjection percentage. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2103)
- Update VirtualHost translations for handling default Mirror percentage (https://github.com/solo-io/gloo-mesh-enterprise/issues/2331)
- Backport support for inja transformations for gloo mesh gateway (NS only) (https://github.com/solo-io/gloo-mesh-enterprise/issues/533)
- Backport HTTP request/response XSLT transformations to Gloo Mesh Gateway (https://github.com/solo-io/gloo-mesh/issues/1841)
- Fixed UI bug when viewing traffic policies without a kube service `subsetMap`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/2212)

v1.2.9 (v1.2.0)

Thu, 13 Jan 2022 13:46:21 GMT

Dependency Bumps
- solo-io/rate-limiter has been upgraded to v0.5.6.
Fixes
- CRD v1beta1 is deprecated. Bump rate-limiter CRDs to v1 to support k8s v1.22. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1853)
- The `relay-client-cert-secret` can now be set on the enterprise agent. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1564)

v1.2.8 (v1.2.0)

Mon, 03 Jan 2022 19:26:19 GMT

Fixes
- Add requestIpMatcher so that AccessPolicies can match based on X-Forwarded-For IP addresses (https://github.com/solo-io/gloo-mesh-enterprise/issues/1947)

v1.2.7 (v1.2.0)

Thu, 09 Dec 2021 18:51:04 GMT

Fixes
- Exposes an HTTP port for AWS load balancer health checks. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1504)

v1.2.6 (v1.2.0)

Tue, 07 Dec 2021 15:29:43 GMT

Fixes
- Fix nil panic in localized plugin from caller rather than in underlying function. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1938)

v1.2.5 (v1.2.0)

Wed, 01 Dec 2021 17:45:10 GMT

Fixes
- Fix nil deref error in `sets.Key()`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1938)
- Validate VirtualDestination hostnames so that short hostnames are correctly marked as invalid. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1910)

v1.2.4 (v1.2.0)

Mon, 29 Nov 2021 15:26:09 GMT

Fixes
- Update extauth dependency to pick up CRD V1. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1853)
- Add a host header rewrite for generated Istio VirtualServices that route to static destinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1763)
- Display a name.namespace convention instead of a name.namespace.cluster convention for policy sources. (https://github.com/solo-io/gloo-mesh-enterprise/issues/927)
- Update `meshctl install` and `meshctl cluster register` to set the namespace of the installation when they create / update the `meshctl` config file. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1578)
- `meshctl cluster configure` now correctly lists contexts rather than cluster names for the context prompt. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1801)
- The `meshctl cluster configure` command now starts by creating an empty configuration file in the target location if none exists. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1531)
- Fixes bug in support for multiple roots for relay certs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1759)
- Unblocks support for a longer cert chain for relay. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1760)
- Allow configuration of circuit breaker ("ConnectionPool" in Istio) using traffic policies. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1223)

v1.2.3 (v1.2.0)

Tue, 09 Nov 2021 16:55:39 GMT

Fixes
- Fix the label location in the WorkloadEntry created by a Virtual Destination. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1780)
- Graph now shows a small summary of a node on hover. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1766)

v1.2.2 (v1.2.0)

Fri, 05 Nov 2021 20:17:38 GMT

Dependency Bumps
- istio.io/istio has been upgraded to v0.0.0-20211019135535-77e71d7074d8.
Fixes
- Update IstioOperator CRD API version from v1beta1 to v1 (https://github.com/solo-io/gloo-mesh-enterprise/issues/1829)

v1.2.1 (v1.2.0)

Thu, 04 Nov 2021 21:11:27 GMT

Fixes
- Re-enable garbage collection on final cluster deregistration. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1521)
- Fix mtls query to properly get security info despite data issues. Anomalous data resulted in creation of https://github.com/solo-io/gloo-mesh-enterprise/issues/1806. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1551)
- Istio Sidecar resources will now restrict the namespaces of egress hosts for external destinations based on the destination's `exportTo` field. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1409)
- ServiceDependencies with no destinationSelectors will now result in Istio Sidecar resources with the "~/*" host, which can be used to completely trim the configuration for sidecars that simply receive traffic and respond, but make no outbound connections of their own. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1364)
- Fix the formatting of a generated WorkloadEntry label so that it does not end with a '.'. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1780)

v1.2.0 (v1.2.0)

Tue, 02 Nov 2021 23:00:59 GMT

Extra Notes
- This release contained no user-facing changes.

v1.2.0-rc7 (v1.2.0)

Tue, 02 Nov 2021 16:16:47 GMT

Extra Notes
- This release contained no user-facing changes.

v1.2.0-rc6 (v1.2.0)

Tue, 02 Nov 2021 13:32:24 GMT

Fixes
- Show Gloo Mesh version in the UI footer. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1712)

v1.2.0-rc5 (v1.2.0)

Tue, 02 Nov 2021 02:56:30 GMT

Fixes
- Fix VirtualDestinations to use SubjectAltNames in output istio DestinationRules so that meshes with different trust domains will still work with cross-cluster traffic. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1701)
- Fix promQL queries behind graph data to use same time interval between node and edge queries, and to exclude 'unknown' workloads. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1553)
- The observability graph in the UI now features alternative layouts. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1499)
- Graph search boxes combined into single search box with dropdown. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1687)
- Graph controls moved into a toolbar at the bottom of the graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1695)
- Graph edge mTLS icon changed, and icon added for missing mTLS (https://github.com/solo-io/gloo-mesh-enterprise/issues/1690)
- Graph header dropdown design changed (https://github.com/solo-io/gloo-mesh-enterprise/issues/1729)
New Features
- Layout settings are now settable for the Observability Graph in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1689)
Extra Notes
- *Marked as Prerelease due to bad assets*
- This build has been marked as prerelease due to build pipeline failures. Please use v1.2.0-rc6 or higher instead.

v1.2.0-rc4 (v1.2.0)

Fri, 29 Oct 2021 17:13:39 GMT

Fixes
- Include clusterName values in the IstioOperator spec for IstioInstallations (https://github.com/solo-io/gloo-mesh-enterprise/issues/828)
- Allow for a destination to use internal node IP when a cluster is deployed in a private subnet. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1568)
- Fixed issue preventing edge tab from updating when switching between edges on same node (https://github.com/solo-io/gloo-mesh-enterprise/issues/1666)
- Backport to fix policy filtering to apply name filtering to mesh-less resources. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1624)
- Virtual Gateway ingressGatewaySelectors must select at least one Destination to be valid. The destinationSelectors must be of a Kube Service type. Add a warning if a Virtual Gateway ingressGatewaySelector does not select a Destination. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1441)

v1.2.0-rc3 (v1.2.0)

Tue, 26 Oct 2021 17:57:57 GMT

Fixes
- Change type used for IstioOperator global config to allow merging in existing values. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1662)
New Features
- Allow for traffic shifting using traffic policies which target Virtual Destiations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1576)

v1.2.0-rc2 (v1.2.0)

Thu, 21 Oct 2021 19:05:55 GMT

Fixes
- Include rootNamespace override to fix Istio 1.8.6 installations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1579)
- Padding added to pagination controls (https://github.com/solo-io/gloo-mesh-enterprise/issues/1572)
- Tables with filters now don't remove all data in-between loads when filters are changed (https://github.com/solo-io/gloo-mesh-enterprise/issues/1570)
- It's no longer possible to end up on a blank, 'dead' Admin sub-page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1562)
- Checkboxes are now aligned properly on filters of the Policy page in the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1569)
- Fixed wasm filter modal not closing. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1567)
New Features
- Add meshctl command for creating an IstioInstallation CR (https://github.com/solo-io/gloo-mesh-enterprise/issues/853)

v1.2.0-rc1 (v1.2.0)

Tue, 19 Oct 2021 14:58:28 GMT

Extra Notes
- This release contained no user-facing changes.

v1.2.0-beta22 (v1.2.0)

Tue, 19 Oct 2021 14:34:07 GMT

Breaking Changes
- Support for Istio 1.7 is dropped as Gloo Mesh can no longer work alongside it (https://github.com/solo-io/gloo-mesh-enterprise/issues/851)
Fixes
- Add VirtualDestination and ExternalService fields to the rbac-webhook Destination Selector validation. (https://github.com/solo-io/gloo-mesh-enterprise/issues/640)
New Features
- Support istio 1.11 (https://github.com/solo-io/gloo-mesh-enterprise/issues/1236)
- For GM IstioInstallations, add IstioOperator CRs to the output snapshot after successfully installing the controller (https://github.com/solo-io/gloo-mesh-enterprise/issues/851)

v1.2.0-beta21 (v1.2.0)

Thu, 14 Oct 2021 19:41:57 GMT

Dependency Bumps
- solo-io/rate-limiter has been upgraded to 0.5.2.
- solo-io/skv2 has been upgraded to v0.21.0.
Fixes
- Fixed alignment of info on small cards on overview and mesh overview pages (https://github.com/solo-io/gloo-mesh-enterprise/issues/1028)
- Graph edge styles updated to be cleaner and less cluttered (https://github.com/solo-io/gloo-mesh-enterprise/issues/1471)
- Design and colors changed for labels on namespace/cluster containers. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1474)
- The sidebar giving more details on the Graph page of the UI has better accessibility. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1477)
- Changed mTLS icon on graph to a lock (https://github.com/solo-io/gloo-mesh-enterprise/issues/1102)
- The filters at the top of the metrics graph have been adjusted for better visual accessibility. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1480)
- The number of pulses on graph edge animations now represents the edge's relative RPS (https://github.com/solo-io/gloo-mesh-enterprise/issues/1506)
- The initial placement of nodes in the metric Graph of the UI has been adjusted for the average use case. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1473)
- Upgrade the version of grpc-go to the latest. This contains a fix to not disconnect streams on LB TCP Health Check. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1524)
New Features
- Reconcile and translate IstioInstallation API to add the IstioOperator controller (https://github.com/solo-io/gloo-mesh-enterprise/issues/850)
- Nodes in the metrics graph are now draggable. Click one and try it out! (https://github.com/solo-io/gloo-mesh-enterprise/issues/628)
- Allow certain traffic policies to be applied to Virtual Destinations: retries, timeouts, header manipulation, fault injection, and cors. (https://github.com/solo-io/gloo-mesh-enterprise/issues/640)
- Improve UX for meshctl-based enterprise registration by removing the need to explicitly set the relay address. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1313)
- Update VirtualDestination to use WorkloadSelector + WorkloadEntries rather than inline endpoints (https://github.com/solo-io/gloo-mesh-enterprise/issues/1335)

v1.2.0-beta20 (v1.2.0)

Wed, 06 Oct 2021 20:56:53 GMT

Dependency Bumps
- solo-io/rate-limiter has been upgraded to 0.5.1.
Fixes
- Fix duplicate HTTP HCM ext-auth filter added when there are no AuthConfigs present. Before this fix, across multiple gateways this can erroneously prevent traffic on one gateway that has auth omitted. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1332)
- Do not delete output resources whose parent resources are in an error state. Rather we leave the output resources in the cluster in their last known good state. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1363)
- Fix envoy config patcher for HTTP_ROUTE to match on specified route. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1426)
- Fix generated reference api docs to include KubernetesClusterSpec docs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1031)
- Fix unsupported version error for direct response to report Istio version instead of Gloo Mesh. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1239)
- Fixed terminology on gateways tab (https://github.com/solo-io/gloo-mesh-enterprise/issues/1101)
- VirtualMesh tcpkeepalive settings now apply to VirtualDestination hosts (hgit puttps://github.com/solo-io/gloo-mesh-enterprise/issues/1435)
- Graph dropdowns now show options without the search input being in focus (https://github.com/solo-io/gloo-mesh-enterprise/issues/1066)
New Features
- Add destination level External Authentication support for East-West traffic. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1091)
- Add docs for East-West External Authentication (https://github.com/solo-io/gloo-mesh-enterprise/issues/1091)
- Added edge animation to graph, with a pulse based on latency speed (https://github.com/solo-io/gloo-mesh-enterprise/issues/630)

v1.2.0-beta19 (v1.2.0)

Wed, 29 Sep 2021 17:42:47 GMT

Extra Notes
- This release contained no user-facing changes.

v1.2.0-beta18 (v1.2.0)

Wed, 29 Sep 2021 16:27:43 GMT

Extra Notes
- This release contained no user-facing changes.

v1.2.0-beta17 (v1.2.0)

Wed, 29 Sep 2021 15:26:57 GMT

New Features
- Update to CRD v1. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1266)
- Implement a FIPS compliant control-plane. (https://github.com/solo-io/gloo-mesh-enterprise/issues/350)

v1.2.0-beta16 (v1.2.0)

Mon, 27 Sep 2021 19:28:00 GMT

New Features
- Adds support for controlling which clusters and namespaces an externalService is exported to (https://github.com/solo-io/gloo-mesh-enterprise/issues/1291)

v1.2.0-beta15 (v1.2.0)

Fri, 24 Sep 2021 15:21:59 GMT

Dependency Bumps
- solo-io/skv2-enterprise has been upgraded to v0.2.5.
Fixes
- Allow customer to use "." inside of cluster names. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1247)
- Support placing istio config into root-namespace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1228)
- Fix behavior where relay cluster label gets overwritten. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1323)
- Export ServiceEntries to every namespace containing one of the East/West Gateways, instead of just the Istio Installation namespace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1230)
New Features
- Add destination level ratelimiting support for East-West traffic. (https://github.com/solo-io/gloo-mesh-enterprise/issues/843)
- Implement rbac webhook validation for Virtual Gateways, Virtual Hosts, and Route Tables. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1045)
- Replace creation of mtls destination rules for each route with peer authentication objects for the route's mesh. (https://github.com/solo-io/gloo-mesh-enterprise/issues/833)
- Create ServiceEntires with resolution DNS from externalServices where no endpoints are provided, but at least one host is provided. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1290)

v1.2.0-beta14 (v1.2.0)

Fri, 17 Sep 2021 21:31:28 GMT

Fixes
- Fixes the `EnvoyFilters` created by direct response routes such that they are in the correct route order. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1194)
- Fix mesh being garbage collected with improper label, leading to incorrect cacerts. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1304)

v1.2.0-beta13 (v1.2.0)

Thu, 16 Sep 2021 21:45:25 GMT

Extra Notes
- This release contained no user-facing changes.

v1.2.0-beta12 (v1.2.0)

Thu, 16 Sep 2021 18:04:25 GMT

Extra Notes
- This release contained no user-facing changes.

v1.2.0-beta11 (v1.2.0)

Thu, 16 Sep 2021 15:17:04 GMT

Extra Notes
- This release contained no user-facing changes.

v1.2.0-beta10 (v1.2.0)

Thu, 16 Sep 2021 12:45:47 GMT

Fixes
- Specify output resource which failed to write in error message. (https://github.com/solo-io/gloo-mesh/issues/1284)
- Fix disable relay ca to still use client cert authenticator. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1224)
- Fix license locking wasm for GME. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1176)

v1.2.0-beta9 (v1.2.0)

Fri, 10 Sep 2021 13:35:02 GMT

Fixes
- Fix duplicate route patches in envoy filters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1104)
- Allow the dashboard to list 'settings'. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1188)
- Fix discovery bug which caused uninjected workloads to get discovered. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1186)
- Allow ServiceDependencies to target ExternalService Destinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/907)
- Clicking on site logo brings you back to overview page (https://github.com/solo-io/gloo-mesh-enterprise/issues/1040)
New Features
- Allows for destinations to be discovered for non-discovered workloads. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1216)
- Allow VirtualHosts to route to ExternalService Destinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1112)

v1.2.0-beta8 (v1.2.0)

Thu, 02 Sep 2021 12:43:11 GMT

Extra Notes
- This release contained no user-facing changes.

v1.2.0-beta7 (v1.2.0)

Wed, 01 Sep 2021 21:50:45 GMT

Extra Notes
- This release contained no user-facing changes.

v1.2.0-beta6 (v1.2.0)

Wed, 01 Sep 2021 20:32:16 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.19.6.
Fixes
- Use the correct TLS server name for non-generated default certs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1174)
- Fix UI Overview page workloads and destinations count. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1152)
- Fix UI crash when a Traffic Shift to a VirtualDestination with a zero-length subset array is applied. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1120)
- Fix subset generation to work with Gateway resources. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1118)
- Redact secret annotation. Fix input snapshot Json Marshal. (https://github.com/solo-io/skv2/issues/289)
- Respect the `global.insecure` helm value in the dashboard pod. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1154)

v1.2.0-beta5 (v1.2.0)

Thu, 26 Aug 2021 16:40:05 GMT

Fixes
- Redact secrets in snapshot output. Move debug endpoint to admin service. (https://github.com/solo-io/gloo-mesh-enterprise/pull/1122)

v1.2.0-beta4 (v1.2.0)

Wed, 25 Aug 2021 21:27:47 GMT

Extra Notes
- This release contained no user-facing changes.

v1.2.0-beta3 (v1.2.0)

Wed, 25 Aug 2021 20:15:44 GMT

Extra Notes
- This release contained no user-facing changes.

v1.2.0-beta2 (v1.2.0)

Wed, 25 Aug 2021 17:18:51 GMT

Fixes
- Updates the template for the pods used for `helm test` to respect the `floatingUserId` value of the parent component. This will allow the pods to run on OpenShift. (https://github.com/solo-io/gloo-mesh-enterprise/issues/881)

v1.2.0-beta1 (v1.2.0)

Tue, 24 Aug 2021 23:15:35 GMT

Fixes
- Change the default dashboard 'relayClientAuthority' value from 'enterprise-networking' to 'enterprise-networking.gloo-mesh'. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1108)
- Fix configuration to inherit from the parent route when using delegation to route tables. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1050)
- When the `enterprise-agent-test` is run during meshctl check, add a small wait for pods to start running so that there are less flakes. (https://github.com/solo-io/gloo-mesh/issues/1816)
- Fix gateway count on overview page (https://github.com/solo-io/gloo-mesh-enterprise/issues/944)
- Fix the way policies are listed in the apiserver such that we do not return duplicates. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1023)
- Modify the returned GetPolicyResponse object such that the 'delegated by' table and 'route table' table information is now returned in two separate objects. (https://github.com/solo-io/gloo-mesh-enterprise/issues/914)
- Return a list of sources and destinations for Gloo Mesh Gateway policies. (https://github.com/solo-io/gloo-mesh-enterprise/issues/930)
- Fix configuration to inherit from the virtual host when using delegation to route tables. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1050)
- Fix VirtualDestination Istio version detection to work with strings suffixed with custom build names like `1.9.7-solo`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1087)
- Respect the relay-client-authority helm flag in the apiserver. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1077)

v1.1.8 (v1.1.0)

Wed, 20 Oct 2021 14:17:06 GMT

Fixes
- Upgrade the version of grpc-go to the latest. This contains a fix to not disconnect streams on LB TCP Health Check. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1524)

v1.1.7 (v1.1.0)

Wed, 06 Oct 2021 14:39:56 GMT

Fixes
- Fix envoy config patcher for HTTP_ROUTE to match on specified route. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1426)
- VirtualMesh tcpkeepalive settings now apply to VirtualDestination hosts (https://github.com/solo-io/gloo-mesh-enterprise/issues/1435)

v1.1.6 (v1.1.0)

Mon, 04 Oct 2021 14:28:55 GMT

Fixes
- Fix duplicate HTTP HCM ext-auth filter added when there are no AuthConfigs present. Before this fix, across multiple gateways this can erroneously prevent traffic on one gateway that has auth omitted. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1332)

v1.1.5 (v1.1.0)

Mon, 27 Sep 2021 20:39:53 GMT

Fixes
- Allow customer to use "." inside of cluster names. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1247)
- Fixes the `EnvoyFilters` created by direct response routes such that they are in the correct route order. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1194)
- Fix license locking wasm for GME. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1176)
- Export ServiceEntries to every namespace containing one of the East/West Gateways, instead of just the Istio Installation namespace. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1230)
- Create ServiceEntires with resolution DNS from externalServices where no endpoints are provided, but at least one host is provided. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1290)
- Adds support for controlling which clusters and namespaces an externalService is exported to (https://github.com/solo-io/gloo-mesh-enterprise/issues/1291)

v1.1.4 (v1.1.0)

Mon, 13 Sep 2021 18:59:14 GMT

Fixes
- Fix disable relay ca to still use client cert authenticator. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1224)
- Allow the dashboard to list 'settings'. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1188)
- Fix discovery bug which caused uninjected workloads to get discovered. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1186)
- Allow VirtualHosts to route to ExternalService Destinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1112)
- Allow ServiceDependencies to target ExternalService Destinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/907)

v1.1.3 (v1.1.0)

Fri, 03 Sep 2021 13:21:18 GMT

Fixes
- Use the correct TLS server name for non-generated default certs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1174)
- Fix duplicate route patches in envoy filters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1104)
- Fix UI Overview page workloads and destinations count. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1152)
- Fix subset generation to work with Gateway resources. Minor API additions have been made to the subset status in the VirtualDestination and Destination API. Therefore the CRDs should be updated prior to upgrade (https://github.com/solo-io/gloo-mesh-enterprise/issues/1118)

v1.1.2 (v1.1.0)

Tue, 31 Aug 2021 03:59:27 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.19.6.
Fixes
- Fix UI crash when a Traffic Shift to a VirtualDestination with a zero-length subset array is applied. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1120)
- Redact secret annotation. Fix input snapshot Json Marshal. (https://github.com/solo-io/skv2/issues/289)
- Respect the `global.insecure` helm value in the dashboard pod. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1154)

v1.1.1 (v1.1.0)

Thu, 26 Aug 2021 19:30:15 GMT

v1.1.0 (v1.1.0)

Tue, 24 Aug 2021 00:38:46 GMT

Dependency Bumps
- solo-io/gloo-mesh has been upgraded to v1.1.0.
Fixes
- When the `enterprise-agent-test` is run during meshctl check, add a small wait for pods to start running so that there are less flakes. (https://github.com/solo-io/gloo-mesh/issues/1816)
- Fix gateway count on overview page (https://github.com/solo-io/gloo-mesh-enterprise/issues/944)
- Fix the way policies are listed in the apiserver such that we do not return duplicates. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1023)
- Modify the returned GetPolicyResponse object such that the 'delegated by' table and 'route table' table information is now returned in two separate objects. (https://github.com/solo-io/gloo-mesh-enterprise/issues/914)
- Return a list of sources and destinations for Gloo Mesh Gateway policies. (https://github.com/solo-io/gloo-mesh-enterprise/issues/930)
- Fix configuration to inherit from the parent route when using delegation to route tables. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1050)
- Fix VirtualDestination Istio version detection to work with strings suffixed with custom build names like `1.9.7-solo`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1087)
- Respect the relay-client-authority helm flag in the apiserver. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1077)

v1.1.0-rc2 (v1.1.0)

Thu, 19 Aug 2021 21:13:11 GMT

Fixes
- Fix configuration to inherit from the virtual host when using delegation to route tables. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1050)
- Fix gateway count on overview page (https://github.com/solo-io/gloo-mesh-enterprise/issues/944)

v1.1.0-rc1 (v1.1.0)

Wed, 18 Aug 2021 16:52:27 GMT

Extra Notes
- This release contained no user-facing changes.

v1.1.0-beta31 (v1.1.0)

Wed, 18 Aug 2021 16:46:12 GMT

Fixes
- Fix meshctl access logs plugin to work with secure endpoint. (https://github.com/solo-io/gloo-mesh-enterprise/issues/940)
- Fix data-race in e2e test around os.Stdout. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1039)
- Fix delegated multiple destination to correctly merge matchers. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1036)
- Fix route translation for route tables to have correct route name in envoy filter. (https://github.com/solo-io/gloo-mesh-enterprise/pull/862)

v1.1.0-beta30 (v1.1.0)

Tue, 17 Aug 2021 21:42:06 GMT

Dependency Bumps
- solo-io/gloo-mesh has been upgraded to v1.1.0-rc2.
- solo-io/skv2 has been upgraded to v0.19.3.
Fixes
- Fix extauth to opt-out of auth on routes that omit extauth config, but are on virtual hosts that have extauth config. (https://github.com/solo-io/gloo-mesh-enterprise/issues/527)
New Features
- Implemented TLS options in Gateway API (https://github.com/solo-io/gloo-mesh-enterprise/issues/972)

v1.1.0-beta29 (v1.1.0)

Thu, 12 Aug 2021 22:23:40 GMT

Fixes
- Gloo Mesh Gateway config on the connection handler may not have been honored before, depending on how the plugin was written, because the connection handler passed into the internal plugin was never initialized. Update the plugin framework to pass in the correct connection handler (right now just the first one; only one connection handler is supported at a time today). (https://github.com/solo-io/gloo-mesh-enterprise/issues/1025)
- Add holdApplicationUntilProxyStarts to prevent rate-limit crash loops on default install of Gloo Mesh Enterprise. (https://github.com/solo-io/gloo-mesh-enterprise/issues/526)
- The number of gateways on the Overview page has been corrected to include north-south and east-west. (https://github.com/solo-io/gloo-mesh-enterprise/issues/944)
- Change ratelimit and extauth to be opt-in. (https://github.com/solo-io/gloo-mesh-enterprise/issues/526)
New Features
- Add fine grained license lock on GMG exposed features. (https://github.com/solo-io/gloo-mesh-enterprise/issues/554)
- Use the IngressGatewaySelector in the VirtualGateway API. (https://github.com/solo-io/gloo-mesh-enterprise/issues/857)

v1.1.0-beta28 (v1.1.0)

Fri, 06 Aug 2021 21:51:20 GMT

Dependency Bumps
- solo-io/skv2-enterprise has been upgraded to v0.2.3.
Fixes
- Add race detector to enterprise-agent and istiod-agent to catch races in e2e tests. (https://github.com/solo-io/gloo-mesh-enterprise/issues/1003)
- Fix the gloo mesh provided Root CA to accept intermediate certs. (https://github.com/solo-io/gloo-mesh/issues/1733)
- Fix trafficShift on gateway not working when original route didn't have explicit weights. (https://github.com/solo-io/gloo-mesh-enterprise/issues/994)
- Remove redundant nil check from recently added snapshot nil check logic. (https://github.com/solo-io/gloo-mesh-enterprise/issues/992)
- Rename dashboard redis deployment to prevent potential conflicts with ratelimit redis deployment when management and control plane are installed on the same cluster. (https://github.com/solo-io/gloo-mesh-enterprise/pull/862)
- Prevent seg fault from failing snapshot caching by propagating an error instead. (https://github.com/solo-io/gloo-mesh-enterprise/issues/992)
New Features
- Add a helm test hook that runs meshctl checks (https://github.com/solo-io/gloo-mesh-enterprise/issues/840)

v1.1.0-beta27 (v1.1.0)

Wed, 04 Aug 2021 19:58:50 GMT

Dependency Bumps
- solo-io/gloo-mesh has been upgraded to v1.1.0-beta31.
Fixes
- Admin page Mesh/Cluster lines now pivot and have a light grey background (https://github.com/solo-io/gloo-mesh-enterprise/issues/943)
- Update extauth service to no longer crash loop on startup. Update extauth service to new transport version api. (https://github.com/solo-io/gloo-mesh-enterprise/issues/527)
- Fix a bug with the envoy config patcher that could result in duplicate envoy patches in environments with multiple gateways on different clusters with different filters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/527)
- Fix the helm template for the Settings object such that it's located in the namespace derived from the `glooMeshOperatorArgs.settingsRef.namespace` Helm value. (https://github.com/solo-io/gloo-mesh-enterprise/issues/786)
- Fix Virtual Destination Impl to work with VirtualGateway. (https://github.com/solo-io/gloo-mesh-enterprise/issues/916)
- Remove unnecessary grpc-http gateway bridge. (https://github.com/solo-io/gloo-mesh-enterprise/issues/702)
- Improve logging and metrics in networking and agent components. (https://github.com/solo-io/gloo-mesh-enterprise/issues/702)
New Features
- Add gateway ingress rate limiting feature. (https://github.com/solo-io/gloo-mesh-enterprise/issues/526)
- Add state to VirtualHost, VirtualGateway, RouteTable resources. (https://github.com/solo-io/gloo-mesh-enterprise/issues/913)
- Added policy details for CSRF and Rate Limit policy types. (https://github.com/solo-io/gloo-mesh-enterprise/issues/910)
- Policy modal updated with gateway info (if applicable). (https://github.com/solo-io/gloo-mesh-enterprise/issues/800)
- Add RoutesAPI, with rpc calls `DescribeRoute`, `ListVirtualGatewayRoutes`, `ListVirtualHostRoutes`, and `ListRouteTableRoutes`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/904)
- The PolicyAPI now has the following rpc calls: `ListPolicies`, `GetPolicyDetails`, and `GetPolicyYaml`. (https://github.com/solo-io/gloo-mesh-enterprise/issues/885)
- Add routes to the returned policy details. (https://github.com/solo-io/gloo-mesh-enterprise/issues/914)
- Update to graph icons. (https://github.com/solo-io/gloo-mesh-enterprise/issues/631)
- Added path rewrite to the gateway route API. (https://github.com/solo-io/gloo-mesh-enterprise/issues/777)
Extra Notes
- Note this release has been marked as a pre-release due to a bug preventing the agent and mgmt helm charts from being installed in the same plane due to the redis deployments conflicting, as well as another bug related to metrics being broken.

v1.1.0-beta26 (v1.1.0)

Fri, 30 Jul 2021 19:27:47 GMT

Dependency Bumps
- solo-io/gloo-mesh has been upgraded to v1.1.0-beta26.
Fixes
- Fix Virtual Destination Impl to work with VirtualGateway. (https://github.com/solo-io/gloo-mesh-enterprise/issues/916)
- If a url for a specific policy, wasm filter, destination, or workload is opened but not on current list, current url is updated to avoid confusion (https://github.com/solo-io/gloo-mesh-enterprise/issues/946)
New Features
- Implement the initial route and http filter API for extauth in Gloo Mesh Enterprise. (https://github.com/solo-io/gloo-mesh-enterprise/issues/527)
- Allow TrafficPolicies to apply a TrafficShift policy to Gateway traffic. (https://github.com/solo-io/gloo-mesh-enterprise/issues/917)
- Update to graph icons. (https://github.com/solo-io/gloo-mesh-enterprise/issues/631)

v1.1.0-beta25 (v1.1.0)

Wed, 28 Jul 2021 01:28:50 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.19.0.
Fixes
- Fix the helm template for the Settings object such that it's located in the namespace derived from the `glooMeshOperatorArgs.settingsRef.namespace` Helm value. (https://github.com/solo-io/gloo-mesh-enterprise/issues/786)
New Features
- If relay authority is not specified, default it to the relay server address if its a hostname. (https://github.com/solo-io/gloo-mesh-enterprise/issues/748)

v1.1.0-beta24 (v1.1.0)

Fri, 23 Jul 2021 20:09:31 GMT

Fixes
- Fix the gloo mesh provided Root CA to accept intermediate certs. (https://github.com/solo-io/gloo-mesh/issues/1733)
- Moved the graph filters from a siderail to a header above the graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/634)
New Features
- Allow users to provide weights to their route tables. (https://github.com/solo-io/gloo-mesh-enterprise/issues/541)

v1.1.0-beta23 (v1.1.0)

Wed, 21 Jul 2021 18:22:22 GMT

Dependency Bumps
- solo-io/gloo-mesh has been upgraded to v1.1.0-beta19.
Fixes
- Fixed workload modal dropdowns overlapping with YAML viewing/download buttons (https://github.com/solo-io/gloo-mesh-enterprise/issues/893)
New Features
- Implement `VirtualGateway` API, an ingress built on top of istio's gateway API. This release includes features csrf and direct responses. In future versions will include other ingress-native features such as external authentication, rate-limiting, transformations, and more. (https://github.com/solo-io/gloo-mesh-enterprise/issues/309)
- TrafficPolicy resources can now select VirtualHosts, RouteTables, and routes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/579)

v1.1.0-beta22 (v1.1.0)

Mon, 19 Jul 2021 18:20:23 GMT

Fixes
- Fixes a bug where the virtul mesh reference was not being added to the destination applied federation status. (https://github.com/solo-io/gloo-mesh-enterprise/issues/882)

v1.1.0-beta21 (v1.1.0)

Sun, 18 Jul 2021 12:28:35 GMT

Fixes
- If there are no KubernetesCluster CRs, short circuit garbage collection to avoid a cryptic Kubernetes label error. (https://github.com/solo-io/gloo-mesh-enterprise/issues/703)
- Prevent the Gloo Mesh agent from crashing if Istio (specifically the Istio CRDs) is not installed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/809)
- Language updates around traffic patterns for mirror policy display. (https://github.com/solo-io/gloo-mesh-enterprise/issues/560)
- add optional clear && selectall buttons to multiselect, make multiselect multiline. (https://github.com/solo-io/gloo-mesh-enterprise/issues/477)
- All svg images now display properly on Safari (https://github.com/solo-io/gloo-mesh-enterprise/issues/776)
- Reversed last safari SVG fix due to unexpect behavior and only fixed the actual SVG issue on graph controls (https://github.com/solo-io/gloo-mesh-enterprise/issues/776)
- Timeout values now display in ms, not seconds. (https://github.com/solo-io/gloo-mesh-enterprise/issues/723)
- Fix the GetYaml DebugAPI call so that meshes and virtual mesh yaml requests don't error. (https://github.com/solo-io/gloo-mesh/issues/1704)
- YAML view and download option added for Destinations, Workloads, Virtual Destinations, Policy Rules, Access Log Records, and Wasm Filters (https://github.com/solo-io/gloo-mesh-enterprise/issues/731)
Helm Changes
- Converts the handwritten UI Helm chart to ah SKv2-generated one. (https://github.com/solo-io/gloo-mesh-enterprise/issues/701)
New Features
- Card added to overview page for gateways (https://github.com/solo-io/gloo-mesh-enterprise/issues/796)
- Adds a welcome screen that is shown to unauthenticated users. (https://github.com/solo-io/gloo-mesh-enterprise/issues/588)
- Update the license check such that:
- Add the VirtualGatewayApi. (https://github.com/solo-io/gloo-mesh-enterprise/issues/813)

v1.1.0-beta20 (v1.1.0)

Thu, 01 Jul 2021 21:51:23 GMT

Dependency Bumps
- solo-io/skv2-enterprise has been upgraded to 0.1.10.
Fixes
- Add tooltip to cluster names. (https://github.com/solo-io/gloo-mesh-enterprise/issues/784)
- Run Gloo Mesh docker images as non root user. (https://github.com/solo-io/gloo-mesh-enterprise/issues/763)
- Enable auth for forwarding relay server. (https://github.com/solo-io/gloo-mesh-enterprise/issues/729)
New Features
- Extend range time selection to slideout modals (https://github.com/solo-io/gloo-mesh-enterprise/issues/761)
- Extend range time selection to workload modal (https://github.com/solo-io/gloo-mesh-enterprise/issues/760)
- The observability graph now indicates when it is still processing the first render. (https://github.com/solo-io/gloo-mesh-enterprise/issues/733)
- Allow using gloo-mesh insecurely, for easy getting started experience. (https://github.com/solo-io/gloo-mesh-enterprise/issues/781)

v1.1.0-beta19 (v1.1.0)

Mon, 28 Jun 2021 20:42:40 GMT

Fixes
- Several parts of the user experience should be more intuitive or clearer for the metrics graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/636)
New Features
- Add ability to select time range for graph data as opposed to just recent history from now. (https://github.com/solo-io/gloo-mesh-enterprise/issues/635)

v1.1.0-beta18 (v1.1.0)

Fri, 25 Jun 2021 17:24:43 GMT

Fixes
- Several parts of the user experience should be more intuitive or clearer for the metrics graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/636)
- Allows clickthru on error box in mesh overview that leads to mesh detail table with Invalid filter set (https://github.com/solo-io/gloo-mesh-enterprise/issues/677)
New Features
- Allow the user to modify certain aspects of the self-signed helm generated relay certificates. Namely the CN for the root and server cert. As well as the ability to add SANs to the server cert. (https://github.com/solo-io/gloo-mesh/issues/1682)
- You can now control graph movements using only buttons for those without trackpads. (https://github.com/solo-io/gloo-mesh-enterprise/issues/627)

v1.1.0-beta17 (v1.1.0)

Tue, 22 Jun 2021 18:41:56 GMT

Fixes
- Several cluster columns in tables were displaying incorrect names. That is now fixed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/394)
- Switches SWR keys from slash delimeted strings to arrays. (https://github.com/solo-io/gloo-mesh-enterprise/issues/451)
- Set ServiceEntry resolution to `STATIC` if any endpoint addresses are ipv6 to workaround [this Istio issue](https://github.com/envoyproxy/envoy/issues/10489#issuecomment-606290733). (https://github.com/solo-io/gloo-mesh-enterprise/issues/697)
New Features
- Access logs are now viewable from the UI, within the workload details modal. (https://github.com/solo-io/gloo-mesh-enterprise/issues/562)

v1.1.0-beta16 (v1.1.0)

Thu, 17 Jun 2021 19:45:32 GMT

Dependency Bumps
- solo-io/gloo-mesh has been upgraded to v1.1.0-beta13.
New Features
- Back up docker images to Quay every release. (https://github.com/solo-io/gloo-mesh/issues/1553)
- Add ability to optionally disable relay CA functionality. (https://github.com/solo-io/gloo-mesh/issues/1622)

v1.1.0-beta15 (v1.1.0)

Wed, 16 Jun 2021 22:06:42 GMT

Fixes
- The observability graph now properly refreshes on pulse and manual request. (https://github.com/solo-io/gloo-mesh-enterprise/issues/629)
- In the observability graph, edges with security are now highlighted even more strongly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/669)
- Fix a nil error caused by requesting mtls data about an inactive edge that has no other data. This can be done by first selecting an edge, then shrinking the time window to a point where it has no activity anymore. (https://github.com/solo-io/gloo-mesh-enterprise/issues/667)
- Fix metrics api to be able to return more than 1 edge's worth of mtls data. (https://github.com/solo-io/gloo-mesh-enterprise/issues/711)
New Features
- Add OIDC authentication support to the dashboard. (https://github.com/solo-io/gloo-mesh-enterprise/issues/544)
- Add external intermediate Vault CA. (https://github.com/solo-io/gloo-mesh/issues/588)

v1.1.0-beta14 (v1.1.0)

Tue, 15 Jun 2021 15:57:44 GMT

Dependency Bumps
- solo-io/skv2-enterprise has been upgraded to v0.1.9.
Helm Changes
- Add a `defaultMetricsPort` to the enterprise-agent helm value to view stats on the enterprise-agent pod's 9091 port. (https://github.com/solo-io/gloo-mesh-enterprise/issues/696)

v1.1.0-beta13 (v1.1.0)

Thu, 10 Jun 2021 14:06:33 GMT

Fixes
- Removed dead graph dropdown options (https://github.com/solo-io/gloo-mesh-enterprise/issues/656)
- Fix traffic shift to subsets on VirtualDestinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/623)

v1.1.0-beta12 (v1.1.0)

Tue, 08 Jun 2021 15:41:26 GMT

Fixes
- Within the observability graph, we now display vertically 'stacking' namespaces without issue. (https://github.com/solo-io/gloo-mesh-enterprise/issues/648)
- Errors with policies are now shown properly on their details. (https://github.com/solo-io/gloo-mesh-enterprise/issues/571)
New Features
- Allow pagination on the debug apiserver backend. (https://github.com/solo-io/gloo-mesh-enterprise/issues/500)
- The tables within debug meshes on the ui are now pagable, for your large dataset needs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/553)
- The observability graph now has buttons to control zoom and centering for those who prefer or have to avoid trackpad movements. (https://github.com/solo-io/gloo-mesh-enterprise/issues/517)
- Observability graph edges now have more information. Data is kept more up-to-date for details of edges within the sidebar. (https://github.com/solo-io/gloo-mesh-enterprise/issues/561)
- The tables within policies on the ui are now pagable, for your large dataset needs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/553)
- The wasm page of the ui now has pagination, for your large dataset needs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/553)

v1.1.0-beta11 (v1.1.0)

Wed, 26 May 2021 21:42:48 GMT

Fixes
- The Observability graph now prevents clusters and namespace boxes from being drawn overlapping. (https://github.com/solo-io/gloo-mesh-enterprise/issues/543)
- Fix VirtualDestination implementation to account for Istio's [new implementation of Gateway `AUTO_PASSTHROUGH`](https://istio.io/latest/news/security/istio-security-2021-006/). (https://github.com/solo-io/gloo-mesh/issues/1560)
- Workload policies now properly name themselves as such, rather than destinations, within the UI. (https://github.com/solo-io/gloo-mesh-enterprise/issues/440)
New Features
- It is now possible to 'jump back' in the UI using the breadcrumb with more context kept across areas. (https://github.com/solo-io/gloo-mesh-enterprise/issues/438)
- Add a ListAllMeshKeys endpoint to the MeshApi that allows the UI to get all the mesh refs and virtual mesh refs to display as filterable options. (https://github.com/solo-io/gloo-mesh-enterprise/issues/504)
- Pagination hooked up the role-based access tables within the admin section. (https://github.com/solo-io/gloo-mesh-enterprise/issues/553)
- Implement the ServiceDependency API against Istio. (https://github.com/solo-io/gloo-mesh/issues/750)

v1.1.0-beta10 (v1.1.0)

Thu, 20 May 2021 13:08:06 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.17.18.
- solo-io/gloo-mesh has been upgraded to v1.1.0-beta6.
Fixes
- Respect the list options in the inMemorySnapshotBuilder. (https://github.com/solo-io/gloo-mesh-enterprise/issues/502)
- The metrics main graph and workload details graph now both show proper times. (https://github.com/solo-io/gloo-mesh-enterprise/issues/507)
- The detailed views for workloads and destinations now open properly from their mesh tables. (https://github.com/solo-io/gloo-mesh-enterprise/issues/520)
- Multiselect's typeahead functionality is far more user friendly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/478)
- The metrics graph within workload details now allows you to choose inbound, outbound, or both data types. (https://github.com/solo-io/gloo-mesh-enterprise/issues/475)
- The metrics main graph now handles even smaller heighted screens more gracefully. (https://github.com/solo-io/gloo-mesh-enterprise/issues/469)
- Pagination hooked up. (https://github.com/solo-io/gloo-mesh-enterprise/issues/499)
New Features
- Edge details are now available to examine in the metrics graph of the ui. (https://github.com/solo-io/gloo-mesh-enterprise/issues/429)
- Add the ability to paginate clusters, meshes, rbac roles, and rbac subjects on the apiserver. (https://github.com/solo-io/gloo-mesh-enterprise/issues/494)
- Can now filter the metrics graph by virtual meshes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/471)

v1.1.0-beta9 (v1.1.0)

Thu, 13 May 2021 15:07:25 GMT

Fixes
- Namespaces are now shown in the metrics graph in each cluster, and one-offs of cluster and namespace nodes are all highlighted. (https://github.com/solo-io/gloo-mesh-enterprise/issues/493)
- The node details tabm shown from clicking a node in the graph, now keeps its data fresh. (https://github.com/solo-io/gloo-mesh-enterprise/issues/474)
- Metrics data is now polled better. (https://github.com/solo-io/gloo-mesh-enterprise/issues/451)
- The graph shown in Workload Details now responds better to time choice changes. (https://github.com/solo-io/gloo-mesh-enterprise/issues/492)
- Information in the node details tab is now more cleanly displayed. (https://github.com/solo-io/gloo-mesh-enterprise/issues/491)
- Metrics data is now refreshed when new time constraints are chosen. (https://github.com/solo-io/gloo-mesh-enterprise/issues/457)

v1.1.0-beta8 (v1.1.0)

Tue, 11 May 2021 20:42:05 GMT

Fixes
- The Policies page filters no longer fully reset on every data refetch. (https://github.com/solo-io/gloo-mesh/issues/1534)
- The Mesh Details (virtual and non) tables, now load only when tabbed on to. (https://github.com/solo-io/gloo-mesh/issues/1529)
New Features
- Add mtls data to the metrics object returned by the metrics api, and populate it with data from prometheus. (https://github.com/solo-io/gloo-mesh-enterprise/issues/430)
- Add the ability to filter and paginate on the apiserver. (https://github.com/solo-io/gloo-mesh/issues/1379)

v1.1.0-beta7 (v1.1.0)

Mon, 10 May 2021 20:37:42 GMT

Dependency Bumps
- solo-io/skv2 has been upgraded to v0.17.16.
- solo-io/gloo-mesh has been upgraded to v1.1.0-beta5.
Fixes
- Fix for retrieving node metrics when the same workload exists on multiple clusters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/472)
- Surface Prometheus metric registration errors to logs instead of panicking. Panic only if in debug mode. (https://github.com/solo-io/gloo-mesh-enterprise/issues/449)
- Graph now shows up when at least one namespace and filter are selected. (https://github.com/solo-io/gloo-mesh-enterprise/issues/426)
- Fix graph icon scaling. (https://github.com/solo-io/gloo-mesh-enterprise/issues/418)
- Opt-out of sidecar injection in the Gloo Mesh Enterprise pod annotations. (https://github.com/solo-io/gloo-mesh/issues/1431)
- Turn off RBAC installation by default. (https://github.com/solo-io/gloo-mesh/issues/1464)
- Refer to the Gloo Mesh docs in the Virtual Mesh Settings text rather than the Gloo Edge docs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/420)
- The UI graph no longer gets skewy when toggling data options. (https://github.com/solo-io/gloo-mesh-enterprise/issues/444)
- The metrics node details sidebar now gives more information. (https://github.com/solo-io/gloo-mesh-enterprise/issues/404)
- The metrics tab of the workload details modal always loads, though sometimes with a pause. (https://github.com/solo-io/gloo-mesh-enterprise/issues/476)
- The controls for the metrics and traffic tabs of a Workload Details modal now work as intended. (https://github.com/solo-io/gloo-mesh-enterprise/issues/218)
- The workload details Metric graph is now connected to real-time data. (https://github.com/solo-io/gloo-mesh-enterprise/issues/400)
- The workload details Traffic tab is now connected to real-time data. (https://github.com/solo-io/gloo-mesh-enterprise/issues/400)
New Features
- Install Prometheus by default. (https://github.com/solo-io/gloo-mesh-enterprise/issues/446)
- Link to graphs from main menu and mesh / virtual mesh details. (https://github.com/solo-io/gloo-mesh-enterprise/issues/340)
- Implement server-side filtering & pagination for Gloo Mesh Policies. (https://github.com/solo-io/gloo-mesh/issues/1400)
- The list of nodes viewable via the graph is now trimmed by a mesh selector. (https://github.com/solo-io/gloo-mesh-enterprise/issues/401)
- The approach to determining node and edge health in the observability graph now takes both directions into account at once. (https://github.com/solo-io/gloo-mesh-enterprise/issues/410)
- Users are now shown some preview of what is coming to the observability graph and other features. (https://github.com/solo-io/gloo-mesh-enterprise/issues/402)
- Implement workload metrics API in apiserver. (https://github.com/solo-io/gloo-mesh-enterprise/issues/291)
- Return both workload ref and controller ref in graph response. (https://github.com/solo-io/gloo-mesh-enterprise/issues/452)
- Add apiserver API for workload metrics. (https://github.com/solo-io/gloo-mesh-enterprise/issues/291)

v1.1.0-beta6 (v1.1.0)

Mon, 03 May 2021 20:08:56 GMT

New Features
- Separate clusters are now highlighted within the observability graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/219)
- Add DescribeWorkload API and hook up UI to it. (https://github.com/solo-io/gloo-mesh-enterprise/issues/292)
Upgrade Notes
- Add a new input to the GetGraphs endpoint to allow filtering by meshes. If both this new option and the existing namepsace/cluster filtering option are both present, then the results will consist of the intersection of filters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/383)

v1.1.0-beta5 (v1.1.0)

Fri, 30 Apr 2021 13:46:28 GMT

Fixes
- Fix enterprise-networking's self-signed cert generation for helm upgrades. (https://github.com/solo-io/gloo-mesh/issues/1485)
- Nodes and edges may now be idle in the observability graph. (https://github.com/solo-io/gloo-mesh-enterprise/issues/407)
- Graph refresh rates now are tracked properly and the manual Refresh button is working properly. (https://github.com/solo-io/gloo-mesh-enterprise/issues/403)
- Add the floating user ID and runAsUser options to the envoy container on the dashboard pod. (https://github.com/solo-io/gloo-mesh/issues/1456)
- The graph data is now only retrieved when appropriate filters are selected. (https://github.com/solo-io/gloo-mesh-enterprise/issues/425)
New Features
- System settings are now viewable in the admin section. (https://github.com/solo-io/gloo-mesh-enterprise/issues/335)
- A legend is now available to help clarify metrics graph nodes when confused. (https://github.com/solo-io/gloo-mesh-enterprise/issues/398)

v1.1.0-beta4 (v1.1.0)

Thu, 22 Apr 2021 13:34:21 GMT

Fixes
- Fix VirtualDestination port targeting to use target_port rather than the kubernetes service exposed port. (https://github.com/solo-io/gloo-mesh/issues/1414)

v1.1.0-beta3 (v1.1.0)

Wed, 21 Apr 2021 20:22:37 GMT

Extra Notes
- This release contained no user-facing changes.

v1.1.0-beta2 (v1.1.0)

Wed, 21 Apr 2021 17:44:41 GMT

Fixes
- Fix permissions for the Gloo Mesh UI Dockerfiles. (https://github.com/solo-io/gloo-mesh/issues/1456)
New Features
- Surface a metric `relay_pull_clients_connected` and `relay_push_clients_connected` to reflect the number of connected Gloo Mesh Agents at any point in time. (https://github.com/solo-io/gloo-mesh/issues/1461)

v1.1.0-beta1 (v1.1.0)

Mon, 19 Apr 2021 14:29:29 GMT

Fixes
- Rename AccessLogs to AccessLogRecords to match with the actual CRD name. (https://github.com/solo-io/gloo-mesh-enterprise/issues/260)
- On apiserver startup, don't depend on connections to the forwarding relay server or the metrics relay server. (https://github.com/solo-io/gloo-mesh-enterprise/issues/304)
- Fix an issue with deregistration where Discovery CRDs are not garbage collected in the management cluster, specifically due to an agent disconnecting before the corresponding `KubernetesCluster` CR is removed by the user. (https://github.com/solo-io/gloo-mesh/issues/1453)
- Fix issue where Settings CRD is overwritten by agent when running agent in management cluster. (https://github.com/solo-io/gloo-mesh/issues/1394)
- Do not segfault if the garbage collector cannot construct a label selector for objects from an inactive cluster. (https://github.com/solo-io/gloo-mesh/issues/1408)
- Include operator values in Helm values documentation. (https://github.com/solo-io/gloo-mesh/issues/1361)
- Cycles will no longer break the graph ui, though they may not display in a pretty manner. (https://github.com/solo-io/gloo-mesh-enterprise/issues/359)
- The top menu has been cleaned, docs now lives in a help menu alongside a link to the Slack community (https://github.com/solo-io/gloo-mesh-enterprise/issues/298)
- Switch ServiceEntries with DNS hostnames to type DNS to handle
Helm Changes
- Set enterprise-networking (relay) service type to LoadBalancer by default in order to streamline the install process for users running on managed Kubernetes. (https://github.com/solo-io/gloo-mesh/issues/1411)
New Features
- Add apiserver Graph API to get filters (https://github.com/solo-io/gloo-mesh-enterprise/issues/289)
- Add apiserver Graph API to get nodes and edges (https://github.com/solo-io/gloo-mesh-enterprise/issues/288)
- Add generation of swagger spec for REST API. (https://github.com/solo-io/gloo-mesh-enterprise/issues/314)

v1.0.14 (v1.0.0)

Tue, 15 Jun 2021 16:44:05 GMT

Helm Changes
- Add a `defaultMetricsPort` to the enterprise-agent helm value to view stats on the enterprise-agent pod's 9091 port. (https://github.com/solo-io/gloo-mesh-enterprise/issues/696)

v1.0.13 (v1.0.0)

Thu, 10 Jun 2021 16:57:06 GMT

Fixes
- Fix traffic shift to subsets on VirtualDestinations. (https://github.com/solo-io/gloo-mesh-enterprise/issues/623)

v1.0.12 (v1.0.0)

Thu, 27 May 2021 18:33:37 GMT

Fixes
- Fix VirtualDestination implementation to account for Istio's [new implementation of Gateway `AUTO_PASSTHROUGH`](https://istio.io/latest/news/security/istio-security-2021-006/). (https://github.com/solo-io/gloo-mesh/issues/1560)

v1.0.11 (v1.0.0)

Mon, 24 May 2021 15:10:52 GMT

Dependency Bumps
- solo-io/gloo-mesh has been upgraded to v1.0.6.
- solo-io/skv2 has been upgraded to v0.17.16.
Fixes
- Opt-out of sidecar injection in the Gloo Mesh Enterprise pod annotations. (https://github.com/solo-io/gloo-mesh/issues/1431)
- Switch ServiceEntries with DNS hostnames to type DNS to handle

v1.0.10 (v1.0.0)

Fri, 07 May 2021 18:52:32 GMT

Fixes
- Refer to the Gloo Mesh docs in the Virtual Mesh Settings text rather than the Gloo Edge docs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/420)

v1.0.9 (v1.0.0)

Fri, 30 Apr 2021 17:01:53 GMT

Fixes
- Surface a metric `relay_pull_clients_connected` and `relay_push_clients_connected` to reflect the number of connected Gloo Mesh Agents at any point in time. (https://github.com/solo-io/gloo-mesh/issues/1461)

v1.0.8 (v1.0.0)

Wed, 28 Apr 2021 21:02:11 GMT

Fixes
- Fix enterprise-networking's self-signed cert generation for helm upgrades. (https://github.com/solo-io/gloo-mesh/issues/1485)
- The top menu has been cleaned, docs now lives in a help menu alongside a link to the Slack community (https://github.com/solo-io/gloo-mesh-enterprise/issues/298)

v1.0.7 (v1.0.0)

Thu, 22 Apr 2021 19:10:12 GMT

Fixes
- Add the floating user ID and runAsUser options to the envoy container on the dashboard pod. (https://github.com/solo-io/gloo-mesh/issues/1456)

v1.0.6 (v1.0.0)

Thu, 22 Apr 2021 17:24:12 GMT

Fixes
- Fix permissions for the Gloo Mesh UI Dockerfiles. This fixes the dashboard pod startup on OpenShift. (https://github.com/solo-io/gloo-mesh/issues/1456)

v1.0.5 (v1.0.0)

Mon, 19 Apr 2021 16:47:55 GMT

Fixes
- Fix an issue with deregistration where Discovery CRDs are not garbage collected in the management cluster, specifically due to an agent disconnecting before the corresponding `KubernetesCluster` CR is removed by the user. (https://github.com/solo-io/gloo-mesh/issues/1453)

v1.0.4 (v1.0.0)

Mon, 12 Apr 2021 23:58:03 GMT

Helm Changes
- Set enterprise-networking (relay) service type to LoadBalancer by default in order to streamline the install process for users running on managed Kubernetes. (https://github.com/solo-io/gloo-mesh/issues/1411)

v1.0.3 (v1.0.0)

Mon, 12 Apr 2021 17:35:23 GMT

Fixes
- Fix issue where Settings CRD is overwritten by agent when running agent in management cluster. (https://github.com/solo-io/gloo-mesh/issues/1394)

v1.0.2 (v1.0.0)

Fri, 09 Apr 2021 15:18:02 GMT

Fixes
- Do not segfault if the garbage collector cannot construct a label selector for objects from an inactive cluster. (https://github.com/solo-io/gloo-mesh/issues/1408)
- Optimize the ListAllMeshes call by only returning counts and error counts of its mesh resources (workloads, access log records, wasm filters) instead of listing out each resource. (https://github.com/solo-io/gloo-mesh-enterprise/issues/260)

v1.0.1 (v1.0.0)

Mon, 05 Apr 2021 20:59:50 GMT

Fixes
- Include operator values in Helm values documentation. (https://github.com/solo-io/gloo-mesh/issues/1361)
- Include operator values in Helm values documentation for RBAC webhook. (https://github.com/solo-io/gloo-mesh/issues/1381)
- Add generation of swagger spec for REST API. (https://github.com/solo-io/gloo-mesh-enterprise/issues/314)

v1.0.0 (v1.0.0)

Tue, 23 Mar 2021 18:42:23 GMT

API changes
- Enterprise Networking (`networking.enterprise.mesh.gloo.solo.io`) version bump to v1beta1
- Observability (`observability.enterprise.mesh.gloo.solo.io`) version bump to v1
- RBAC (`rbac.enterprise.mesh.gloo.solo.io`) version bump to v1
- Networking Extensions (`extensions.networking.mesh.gloo.solo.io`) version bump to v1beta1
Access logging
- AccessLogRecord CRD for configuring collection.
- Enterprise-networking REST endpoint for retrieving logs (`/v0/observability/logs`).
- `meshctl accesslog` plugin for retrieving logs.
Flat networking support
- Gloo Mesh Enterprise now supports flat network topologies, or workloads across compute environments which can communicate with one another without intermediary ingress gateways.
Meshctl plugins
- Extend meshctl with plugins for added client-side functionality.
- Plugins are managed via a Krew-inspired package manager for easy install, upgrade, and management.
Metrics
- Batteries-included support for golden metrics (request/success/failure counts, request latencies) for Istio service meshes.
- A Prometheus component is now available in the Gloo Mesh Helm chart and can be optionally installed with GME.
- Enterprise-networking REST endpoint for retrieving metrics (`/v0/observability/metrics/node` and `/v0/observability/metrics/edge`).
Relay architecture
- New pull-based architecture enhances Gloo Mesh’s security posture by removing the requirement of granting Gloo Mesh credentials to managed clusters.
VirtualDestination API
- Virtual Destination is an abstraction that allows global service routing and failover based on geographical locality and service health.
Extra Notes
- Gloo Mesh Enterprise 1.0 is now available! See our docs for information on getting started with Gloo Mesh: https://docs.solo.io/gloo-mesh/latest/.

v1.0.0-beta16 (v1.0.0)

Tue, 23 Mar 2021 01:46:00 GMT

Extra Notes
- This release contained no user-facing changes.

v1.0.0-beta15 (v1.0.0)

Mon, 22 Mar 2021 19:30:45 GMT

Dependency Bumps
- solo-io/gloo-mesh has been upgraded to v1.0.0-beta14.
- solo-io/gloo-mesh has been upgraded to v1.0.0-beta13.
Fixes
- Retry failed helm releases to alleviate race condition where gcloud storage has not been updated with latest versions from previous release steps. (https://github.com/solo-io/gloo-mesh-enterprise/issues/284)
- Expose the admin grpc service separately from relay. (https://github.com/solo-io/gloo-mesh-enterprise/issues/268)
Helm Changes
- Add `verbose` Helm value to the enterprise-networking and enterprise-agent helm charts, set to 'false' by default. Setting this value to 'true' will enable debug logging. (https://github.com/solo-io/gloo-mesh-enterprise/issues/262)
New Features
- Allow access logs to capture additional data set by envoy filters, using filterStateObjects. For example, this is particularly useful to log filter states set by custom WASM filters. (https://github.com/solo-io/gloo-mesh-enterprise/issues/165)

v1.0.0-beta14 (v1.0.0)

Mon, 22 Mar 2021 16:42:00 GMT

Fixes
- Fix initialization of AccessLogRecord status. (https://github.com/solo-io/gloo-mesh-enterprise/issues/277)
- Graphing has been hidden away until it is ready to reemerge fully grown. (https://github.com/solo-io/gloo-mesh-enterprise/issues/263)
- Policies in the policy table should no longer shift and churn like so sand in an mobius hourglass. (https://github.com/solo-io/gloo-mesh-enterprise/issues/264)
- Counts for mesh details are now accurate in all locations. (https://github.com/solo-io/gloo-mesh-ui/issues/1565)
- Access log tables are now stacked to avoid overflow issues with longer names. (https://github.com/solo-io/gloo-mesh-enterprise/issues/278)
New Features
- Add generation for Helm values docs. (https://github.com/solo-io/gloo-mesh-enterprise/issues/270)

v1.0.0-beta13 (v1.0.0)

Thu, 18 Mar 2021 16:40:29 GMT

Fixes
- Long lists of meshes in virtual mesh listings now scroll rather than flow off page. (https://github.com/solo-io/gloo-mesh-enterprise/issues/252)

v1.0.0-beta12 (v1.0.0)

Wed, 17 Mar 2021 21:34:56 GMT

Fixes
- Implement selected destinations on virtual destination status. (https://github.com/solo-io/gloo-mesh-enterprise/issues/257)

v1.0.0-beta11 (v1.0.0)

Wed, 17 Mar 2021 15:52:01 GMT

Dependency Bumps
- solo-io/skv2-enterprise has been upgraded to v0.1.4.
- solo-io/gloo-mesh has been upgraded to v1.0.0-beta11.

v1.0.0-beta10 (v1.0.0)

Tue, 16 Mar 2021 19:02:23 GMT

Fixes
- Update ALR status with workloads it applies to. (https://github.com/solo-io/gloo-mesh-enterprise/issues/229)
- If the apiserver is unable to dial the relay server, try again instead of crashing. (https://github.com/solo-io/gloo-mesh-ui/issues/1525)
- ≥ The `NewKubernetesClusterReconciler` call was non-blocking. Due to the addition of a while loop that repeatedly made calls to the relay server, the number of goroutines would increase constantly. This has been fixed by 1) Moving the KubernetesClusterReconciler out of the while loop and separating it from the grpc.Dial retry logic, 2) making the `WatchForRelaySnapshots` call with the grpc.Dial a blocking function. (https://github.com/solo-io/gloo-mesh-enterprise/issues/241)
Helm Changes
- Add self-signed helm value for easy cert initialization. (https://github.com/solo-io/gloo-mesh-enterprise/issues/201)
New Features
- Translate new ALR fields for including HTTP request/response header/trailers. (https://github.com/solo-io/gloo-mesh-enterprise/issues/212)
- Add golden metrics API for querying request count, success count, failure count, and request latencies for the network modeled as nodes and edges. (https://github.com/solo-io/gloo-mesh-enterprise/issues/181)
- Add Prometheus as subchart to Helm chart. (https://github.com/solo-io/gloo-mesh-enterprise/issues/207)
- Implement Envoy metrics sink to aggregate metrics from Istio workloads configured with enterprise-networking server as the metrics sink. (https://github.com/solo-io/gloo-mesh-enterprise/issues/128)

v1.0.0-beta9 (v1.0.0)

Wed, 10 Mar 2021 21:54:33 GMT

Dependency Bumps
- solo-io/gloo-mesh has been upgraded to v1.0.0-beta7.
- solo-io/cli-kit has been upgraded to v0.1.2.
Fixes
- Add a license check to enterprise-networking such that expired trial licenses no longer work, but expired enterprise licenses just log a warning. (https://github.com/solo-io/gloo-mesh-enterprise/issues/195)
- Rename the gloo-mesh-apiserver pod to dashboard, and update the helm chart. (https://github.com/solo-io/gloo-mesh/issues/1276)
Helm Changes
- Rename GlooMeshApiserver to GlooMeshDashboard, and move all apiserver helm values one level down under GlooMeshDashboard.apiserver. (https://github.com/solo-io/gloo-mesh/issues/1276)
New Features
- Allow users to override the enterprise-networking service type via helm. (https://github.com/solo-io/gloo-mesh-enterprise/issues/185)
- Add a new Snapshot Forwarding Relay Server that will forward all the snapshots sent by the remote relay agents to the apiserver. (https://github.com/solo-io/gloo-mesh-enterprise/issues/180)

v1.0.0-beta8 (v1.0.0)

Tue, 09 Mar 2021 14:22:18 GMT

Fixes
- Fix wasm plugin version command. (https://github.com/solo-io/gloo-mesh-enterprise/issues/189)

v1.0.0-beta7 (v1.0.0)

Thu, 04 Mar 2021 15:13:18 GMT

New Features
- Automate creation of Service Entries for non-mesh external services across all clusters in the virtual mesh using TrafficTargets. (https://github.com/solo-io/gloo-mesh-enterprise/issues/121)

v1.0.0-beta6 (v1.0.0)

Tue, 02 Mar 2021 21:03:29 GMT

v1.0.0-beta5 (v1.0.0)

Fri, 26 Feb 2021 22:32:26 GMT

v1.0.0-beta4 (v1.0.0)

Fri, 26 Feb 2021 16:08:21 GMT

v1.0.0-beta3 (v1.0.0)

Tue, 23 Feb 2021 14:40:19 GMT

v1.0.0-beta2 (v1.0.0)

Thu, 18 Feb 2021 22:43:29 GMT

v1.0.0-beta1 (v1.0.0)

Thu, 18 Feb 2021 21:17:55 GMT

v0.5.1 (v0.5.0)

Wed, 27 Jan 2021 15:03:12 GMT

v0.5.0 (v0.5.0)

Wed, 20 Jan 2021 22:48:34 GMT

v0.4.0 (v0.4.0)

Fri, 15 Jan 2021 21:29:53 GMT

v0.3.6 (v0.3.0)

Mon, 04 Jan 2021 16:21:10 GMT

v0.3.5 (v0.3.0)

Tue, 22 Dec 2020 18:11:11 GMT

v0.3.4 (v0.3.0)

Mon, 21 Dec 2020 15:15:33 GMT

v0.3.3 (v0.3.0)

Fri, 18 Dec 2020 17:59:03 GMT

v0.3.2 (v0.3.0)

Fri, 18 Dec 2020 17:03:09 GMT

v0.3.0 (v0.3.0)

Tue, 15 Dec 2020 22:06:00 GMT

v0.2.2 (v0.2.0)

Tue, 15 Dec 2020 14:59:39 GMT

v0.2.1 (v0.2.0)

Tue, 15 Dec 2020 02:12:43 GMT

v0.2.0 (v0.2.0)

Fri, 11 Dec 2020 21:36:02 GMT

v0.1.11 (v0.1.0)

Mon, 07 Dec 2020 16:51:02 GMT

v0.1.10 (v0.1.0)

Fri, 04 Dec 2020 22:16:22 GMT

v0.1.9 (v0.1.0)

Thu, 03 Dec 2020 18:51:40 GMT

v0.1.8 (v0.1.0)

Wed, 02 Dec 2020 23:03:12 GMT

v0.1.7 (v0.1.0)

Wed, 02 Dec 2020 19:37:30 GMT

v0.1.6 (v0.1.0)

Wed, 02 Dec 2020 19:31:37 GMT

v0.1.5 (v0.1.0)

Wed, 02 Dec 2020 19:20:45 GMT

v0.1.4 (v0.1.0)

Wed, 02 Dec 2020 19:10:32 GMT

v0.1.3 (v0.1.0)

Wed, 18 Nov 2020 16:34:58 GMT

v0.1.2 (v0.1.0)

Fri, 13 Nov 2020 16:41:56 GMT

v0.1.1 (v0.1.0)

Fri, 13 Nov 2020 15:53:15 GMT

v0.1.0 (v0.1.0)

Thu, 12 Nov 2020 22:12:38 GMT

v0.0.2 (v0.0.0)

Thu, 12 Nov 2020 18:52:14 GMT

v0.0.1 (v0.0.0)

Mon, 13 Jul 2020 19:31:21 GMT