emissary-ingress/emissary v1.10.0

Ambassador 1.10.0

on GitHub

🎉 Ambassador 1.10.0 🎉

Ambassador is an open source, Kubernetes-native microservices API gateway built on the Envoy Proxy.

Upgrade Ambassador - https://www.getambassador.io/reference/upgrading.html
View changelog - https://github.com/datawire/ambassador/blob/master/CHANGELOG.md
Get started with Ambassador on Kubernetes - https://www.getambassador.io/user-guide/getting-started

Ambasssador API Gateway + Ambassador Edge Stack

• Feature: The redirect response code returned by Ambassador is now configurable using redirect_reponse_code on Mappings that use host_redirect.
• Feature: The redirect location header returned by Ambassador now supports prefix rewrites using prefix_redirect on Mappings that use host_redirect.
• Feature: The redirect location header returned by Ambassador now supports regex rewrites using regex_redirect on Mappings that use host_redirect.
• Feature: Expose max_request_headers_kb in the Ambassador Module. This directly exposes the same value in Envoy; see Envoy documentation for more information.
• Feature: Support Istio mTLS certification rotation for Istio 1.5 and higher. See the howto for details.
• Feature: The Ambassador Module's error_response_overrides now support configuring an empty response body using text_format. Previously, empty response bodies could only be configured by specifying an empty file using text_format_source.
• Feature: OAuth2 Filter: Support injecting HTTP header fields in to the request before passing on to the upstream service. Enables passing along id_token information to the upstream if it was returned by the IDP.
• Bugfix: Fix a bug in the Mapping CRD where the text_format_source field was incorrectly defined as type string instead of an object, as documented.
• Bugfix: The RBAC requirements when AMBASSADOR_FAST_RECONFIGURE is enabled now more-closely match the requirements when it's disabled.
• Bugfix: Fix error reporting and required-field checks when fast validation is enabled. Note that fast validation is now the default; see below.
• Change: Fast validation is now the default, so the AMBASSADOR_FAST_VALIDATION variable has been removed. The Golang boot sequence is also now the default. Set AMBASSADOR_LEGACY_MODE=true to disable these two behaviors.
• Change: ambassador-consul-connect resources now get deployed into the ambassador namespace instead of the active namespace specified in the user's kubernetes context (usually default). Old resource cleanup is documented in the Ambassador Consul integration documentation.

Ambassador Edge Stack only

• Default-off early access: Ratelimiting now supports redis clustering, local caching, and an upgraded redis client with improved scalability. Must set AES_RATELIMIT_PREVIEW=true to access these improvements.
• Bugfix: OAuth2 Filter: Fix insufficient_scope error when validating Azure access tokens.
• Bugfix: Filters: Fix a capitalization-related bug where sometimes existing headers are appended to when they should be overwritten.