Skip to content

For the complete documentation index, see llms.txt. Markdown versions of all docs pages are available by appending .md to any docs URL.

Open Source attribution

Page as Markdown
Learn about the open source attribution and licenses that are used by Gloo Mesh Gateway.
Third-party components are not within Solo Support’s scope, regardless of how they are installed. For issues with third-party components, contact the respective vendor or open-source project community.
Solo provides Helm values to install certain third-party components as a convenience. The versions of Helm-installable components shipped with each Solo release are tested for compatibility with that release. Solo upgrades Helm references to third-party components as part of regular release activity to incorporate updates, which might include security fixes. For components you install independently, consult the respective vendor for CVE remediation.
ComponentVendor / project
AlertmanagerCNCF / Prometheus Authors
cert-managerCNCF / cert-manager Authors
GrafanaGrafana Labs
JaegerCNCF / Jaeger Authors
OpenTelemetry collectorCNCF / OpenTelemetry Authors
PrometheusCNCF / Prometheus Authors
RedisRedis Ltd.
TempoGrafana Labs
3rd-party open source software

The following 3rd-party open source software is provided by Solo in connection with Gloo Mesh Gateway.
NameVersionLicense
atomicgo.dev/keyboardv0.2.9MIT License
go/storagev1.57.1Apache License 2.0
exporter/prometheusv0.4.2Apache License 2.0
Masterminds/semverv1.5.0MIT License
semver/v3v3.5.0MIT License
sprig/v3v3.3.0MIT License
miniredis/v2v2.31.1-0.20231011092747-feeb18972ed5MIT License
asaskevich/govalidatorv0.0.0-20230301143203-a9d515a09cc2MIT License
avast/retry-gov3.0.0+incompatibleMIT License
aws/aws-sdk-gov1.55.8Apache License 2.0
aws/aws-sdk-go-v2v1.41.7Apache License 2.0
aws-sdk-go-v2/configv1.32.15Apache License 2.0
aws-sdk-go-v2/credentialsv1.19.14Apache License 2.0
service/lambdav1.53.0Apache License 2.0
service/licensemanagerv1.25.0Apache License 2.0
service/stsv1.41.10Apache License 2.0
cert-manager/cert-managerv1.13.2Apache License 2.0
cilium/ciliumv1.17.15Apache License 2.0
cncf/udpav0.0.2-0.20201211205326-cc1b757b3eddApache License 2.0
udpa/gov0.0.0-20220112060539-c52dc94e7fbeApache License 2.0
cncf/xdsv0.0.0-20231016030527-8bd2eac9fb4aApache License 2.0
xds/gov0.0.0-20260202195803-dba9d589def2Apache License 2.0
containerd/containerdv1.7.30Apache License 2.0
deislabs/orasv0.11.1MIT License
distribution/referencev0.5.0Apache License 2.0
docker/distributionv2.8.3+incompatibleApache License 2.0
docker/dockerv27.5.0+incompatibleApache License 2.0
envoyproxy/data-plane-apiv0.0.0-20210110221212-8c6115ddd1b8Apache License 2.0
envoyproxy/go-control-planev0.14.1-0.20260113062649-004b9ec70a46Apache License 2.0
go-control-plane/envoyv1.37.1-0.20260409083702-98966259b99aApache License 2.0
envoyproxy/protoc-gen-validatev1.3.3Apache License 2.0
json-patch/v5v5.9.11BSD 3-clause “New” or “Revised” License
fgrosse/zaptestv1.1.0MIT License
gertd/go-pluralizev0.1.1MIT License
getkin/kin-openapiv0.133.0MIT License
ghodss/yamlv1.0.1-0.20190212211648-25d852aebe32MIT License
go-jose/v3v3.0.4Apache License 2.0
go-logr/zaprv1.3.0Apache License 2.0
go-test/deepv1.1.1MIT License
gogo/protobufv1.3.2BSD 3-clause “New” or “Revised” License
jwt/v4v4.5.2MIT License
golang/protobufv1.5.4BSD 3-clause “New” or “Revised” License
golang/syncv0.0.0-20180314180146-1d60e4601c6fBSD 3-clause “New” or “Revised” License
google/go-cmpv0.7.0BSD 3-clause “New” or “Revised” License
google/go-containerregistryv0.21.5Apache License 2.0
go-github/v32v32.0.0BSD 3-clause “New” or “Revised” License
go-github/v45v45.2.0BSD 3-clause “New” or “Revised” License
go-github/v63v63.0.0BSD 3-clause “New” or “Revised” License
google/uuidv1.6.0BSD 3-clause “New” or “Revised” License
googleapis/googleapisv0.0.0-20210126034214-6fa7194aba4dApache License 2.0
gorilla/websocketv1.5.4-0.20250319132907-e064f32e3674BSD 2-clause “Simplified” License
graphql-go/graphqlv0.8.1MIT License
grezar/go-circleciv0.6.2MIT License
grpc-ecosystem/go-grpc-middlewarev1.4.0Apache License 2.0
gruntwork-io/go-commonsv0.8.0MIT License
gruntwork-io/terratestv0.42.0Apache License 2.0
huandu/xstringsv1.5.0MIT License
iancoleman/strcasev0.2.0MIT License
jinzhu/inflectionv1.0.0MIT License
k8snetworkplumbingwg/network-attachment-definition-clientv1.4.0Apache License 2.0
kelseyhightower/envconfigv1.4.0MIT License
kevinburke/ssh_configv1.2.0MIT License
kgateway/v2v2.2.0-beta.5.0.20260109202503-38addc8c1548Apache License 2.0
klauspost/compressv1.18.6Apache License 2.0
kr/prettyv0.3.1MIT License
echo/v4v4.11.4MIT License
lestrrat-go/jwxv1.2.31MIT License
manifoldco/promptuiv0.9.0BSD 3-clause “New” or “Revised” License
archiver/v3v3.5.1MIT License
mitchellh/hashstructurev1.1.0MIT License
mitchellh/mapstructurev1.5.1-0.20231216201459-8508981c8b6cMIT License
mpvl/uniquev0.0.0-20150818121801-cbe035fff7deMIT License
oapi-codegen/v2v2.4.1Apache License 2.0
oapi-codegen/runtimev1.1.1Apache License 2.0
olekukonko/tablewriterv0.0.5MIT License
ginkgo/v2v2.28.1MIT License
onsi/gomegav1.40.0MIT License
opencontainers/go-digestv1.0.0Apache License 2.0
opencontainers/image-specv1.1.1Apache License 2.0
otiai10/copyv1.14.1MIT License
pborman/uuidv1.2.1BSD 3-clause “New” or “Revised” License
pkg/browserv0.0.0-20240102092130-5ac0b6a4141cBSD 2-clause “Simplified” License
pkg/errorsv0.9.1BSD 2-clause “Simplified” License
pkg/sftpv1.13.7BSD 2-clause “Simplified” License
pmezard/go-difflibv1.0.1-0.20181226105442-5d4384ee4fb2BSD 3-clause “New” or “Revised” License
prometheus/client_golangv1.23.2Apache License 2.0
prometheus/client_modelv0.6.2Apache License 2.0
prometheus/commonv0.67.5Apache License 2.0
pseudomuto/protoc-gen-docv1.5.1MIT License
pseudomuto/protokitv0.2.0MIT License
pterm/ptermv0.12.79MIT License
go-ruleguard/dslv0.3.23BSD 3-clause “New” or “Revised” License
rantav/go-grpc-channelzv0.0.2MIT License
go-redis/v9v9.14.1BSD 2-clause “Simplified” License
rogpeppe/go-internalv1.14.1BSD 3-clause “New” or “Revised” License
rotisserie/erisv0.5.4MIT License
ryanuber/go-globv1.0.0MIT License
segmentio/textiov1.2.0MIT License
sirupsen/logrusv1.9.4MIT License
slack-go/slackv0.17.3BSD 2-clause “Simplified” License
spf13/cobrav1.10.2Apache License 2.0
spf13/pflagv1.0.10BSD 3-clause “New” or “Revised” License
spf13/viperv1.21.0MIT License
go-spiffe/v2v2.6.0Apache License 2.0
spiffe/spire-api-sdkv1.11.1Apache License 2.0
stretchr/testifyv1.11.1MIT License
theupdateframework/go-tufv0.7.0BSD 3-clause “New” or “Revised” License
wI2L/jsondiffv0.5.2MIT License
go.opencensus.iov0.24.0Apache License 2.0
collector/componentv0.118.0Apache License 2.0
config/configcompressionv1.22.0Apache License 2.0
config/configgrpcv0.116.0Apache License 2.0
config/configopaquev1.22.0Apache License 2.0
config/configtlsv1.22.0Apache License 2.0
collector/pdatav1.42.0Apache License 2.0
go.uber.org/atomicv1.11.0MIT License
go.uber.org/mockv0.6.0Apache License 2.0
go.uber.org/multierrv1.11.0MIT License
go.uber.org/zapv1.28.0MIT License
x/cryptov0.50.0BSD 3-clause “New” or “Revised” License
x/expv0.0.0-20260218203240-3dfff04db8faBSD 3-clause “New” or “Revised” License
x/modv0.35.0BSD 3-clause “New” or “Revised” License
x/netv0.53.0BSD 3-clause “New” or “Revised” License
x/oauth2v0.36.0BSD 3-clause “New” or “Revised” License
x/syncv0.20.0BSD 3-clause “New” or “Revised” License
x/sysv0.44.0BSD 3-clause “New” or “Revised” License
x/timev0.15.0BSD 3-clause “New” or “Revised” License
google.golang.org/apiv0.272.0BSD 3-clause “New” or “Revised” License
googleapis/apiv0.0.0-20260504160031-60b97b32f348Apache License 2.0
google.golang.org/grpcv1.81.0Apache License 2.0
security/advancedtlsv0.0.0-20230126002829-2a1e9348ff7bApache License 2.0
google.golang.org/protobufv1.36.11BSD 3-clause “New” or “Revised” License
gopkg.in/yaml.v2v2.4.0Apache License 2.0
gopkg.in/yaml.v3v3.0.1MIT License
helm/v3v3.20.2Apache License 2.0
istio.io/apiv1.30.0-rc.0.0.20260508191950-a283232d9647Apache License 2.0
api/123v1.23.4Apache License 2.0
istio.io/client-gov1.30.0Apache License 2.0
istio.io/istiov0.0.0-20260515184340-fe02c1c19204Apache License 2.0
k8s.io/apiv0.35.3Apache License 2.0
k8s.io/apiextensions-apiserverv0.35.3Apache License 2.0
k8s.io/apimachineryv0.35.3Apache License 2.0
k8s.io/apiserverv0.35.3Apache License 2.0
k8s.io/cli-runtimev0.35.3Apache License 2.0
k8s.io/client-gov0.35.3Apache License 2.0
k8s.io/component-basev0.35.3Apache License 2.0
k8s.io/component-helpersv0.35.3Apache License 2.0
klog/v2v2.140.0Apache License 2.0
k8s.io/kubectlv0.35.3Apache License 2.0
k8s.io/metricsv0.35.3Apache License 2.0
k8s.io/utilsv0.0.0-20260319190234-28399d86e0b5Apache License 2.0
knative.dev/pkgv0.0.0-20240905103434-a1469cf54480Apache License 2.0
rogchap.com/v8gov0.7.1-0.20221102201510-1f00b5007d95BSD 3-clause “New” or “Revised” License
sigs.k8s.io/controller-runtimev0.23.3Apache License 2.0
sigs.k8s.io/gateway-apiv1.5.1Apache License 2.0
sigs.k8s.io/kindv0.31.0Apache License 2.0
sigs.k8s.io/yamlv1.6.0MIT License
cmd/goimportslatestMIT License
gogo/protobuflatestMIT License
envoyproxy/envoylatestApache License 2.0
envoyproxy/protoc-gen-validatelatestApache License 2.0
paulvollmer/2gobyteslatestMIT License
Free software and Mozilla Public License software

The following free software under the GNU General Public License and Mozilla Public License are utilized by Gloo Mesh Gateway.
NameVersionLicense
hashicorp/go-multierrorv1.1.1Mozilla Public License 2.0
hashicorp/go-versionv1.9.0Mozilla Public License 2.0
hashicorp/golang-lruv1.0.2Mozilla Public License 2.0
vault/apiv1.22.0Mozilla Public License 2.0
vault/sdkv0.10.0Mozilla Public License 2.0
Solo distributions of IstioFeature gates