github envoyproxy/gateway v1.1.0

latest releases: latest, v1.1.1
one month ago

Release Announcement

Check out the v1.1 release announcement to learn more about the release.

What's Changed

  • ci: update cherry-pick v1.0.0 by @Xunzhuo in #2784
  • fix: add missing release notes details and re organize it by @Xunzhuo in #2785
  • e2e: backend upgrade test by @guydc in #2725
  • chore: add testdata to passive health checks by @deszhou in #2788
  • promote: guydc as maintainer by @Xunzhuo in #2794
  • fix: Delete unused status keys from watchable by @uniglot in #2782
  • docs: fix commands in basic auth example by @arkodg in #2791
  • feat: Support WellKnownSystemCerts in BackendTLSPolicy by @liorokman in #2804
  • docs: refactor user guides by @Xunzhuo in #2797
  • Fix gen check by @Xunzhuo in #2814
  • refactor: set instead of map for mergeGateways by @deszhou in #2803
  • remove: support for hostnetwork by @Xunzhuo in #2815
  • feat(egctl): add support for egctl to translate from gateway-api resources to IR by @liorokman in #2799
  • docs: basic auth example use https by @phantooom in #2806
  • chore: group go.opentelemetry.io dependabot by @zirain in #2821
  • Add referenced BackendRefs for ExtAuth to Resource Tree by @zhaohuabing in #2795
  • fix bootstrap merge by @zirain in #2801
  • fix: skip the ReasonTargetNotFound for all policies by @shawnh2 in #2802
  • docs: update EnvoyProxy logs by @zirain in #2822
  • fix: omit default replicas on Kubernetes Deployment by @ardikabs in #2816
  • bug: compute endpointType for all protocol types by @arkodg in #2833
  • docs: Routing outside k8s by @arkodg in #2831
  • build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 by @dependabot in #2825
  • build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 by @dependabot in #2826
  • build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #2827
  • Fix: failed to create envoy-oidc-hmac secret when upgrading EG by @zhaohuabing in #2835
  • build(deps): bump google.golang.org/grpc from 1.62.0 to 1.62.1 by @dependabot in #2829
  • Ext auth e2e tests by @zhaohuabing in #2830
  • fix existing secret check by @zirain in #2838
  • ci: update k8s matrix by @zirain in #2836
  • e2e: try to fix client timeout flakes by @zirain in #2812
  • feat: Support Upstream TLS to multiple Backends by @liorokman in #2818
  • e2e: move drain settings into shutdown settings by @arkodg in #2850
  • docs: mtls to the gateway by @arkodg in #2851
  • ignore finalizers when comparing envoy proxy svc by @arkodg in #2856
  • Chore: remove the uncessary allAssociatedRefGrants from resourceMappings by @zhaohuabing in #2843
  • docs: allow users to configure custom certs for control plane auth by @zirain in #2847
  • add e2e tests for ext auth with grpc auth service by @zhaohuabing in #2841
  • fix: Address race condition disrupting graceful shutdown process by @davidalger in #2864
  • docs: move Design docs under "Get Involved" by @arkodg in #2857
  • e2e: backend TLS policy by @guydc in #2853
  • Update the user doc for OIDC by @zhaohuabing in #2778
  • add ADOPTERS.md by @zhaohuabing in #2865
  • build(deps): bump softprops/action-gh-release from 1 to 2 by @dependabot in #2867
  • build(deps): bump github.com/bufbuild/buf from 1.29.0 to 1.30.0 in /tools/src/buf by @dependabot in #2870
  • build(deps): bump github.com/prometheus/common from 0.49.0 to 0.50.0 by @dependabot in #2871
  • build(deps): bump fortio.org/fortio from 1.63.3 to 1.63.4 by @dependabot in #2873
  • Add tetrate to adopters by @zhaohuabing in #2874
  • fix: Don't override the ALPN array if HTTP/3 is enabled. by @liorokman in #2876
  • [e2e] eg release upgrade test by @alexwo in #2862
  • Docs for ext auth by @zhaohuabing in #2868
  • Remove the uncessary \ by @zhaohuabing in #2883
  • docs: backend tls policy by @guydc in #2884
  • feat: add PolicyStatus for BackendTrafficPolicy by @shawnh2 in #2846
  • Change the Merge behavior to Replace for SecurityPolicy by @zhaohuabing in #2885
  • e2e: add weighted backend by @ShyunnY in #2863
  • http3: use service port in alt-svc header by @arkodg in #2886
  • bug: add h3 alpn by default if http3 is enabled by @arkodg in #2887
  • fix: prevent policies targeting non-TLS listeners on the same port from conflicting by @liorokman in #2786
  • chore: remove ProcessBackendTLSPoliciesAncestorRef by @zhaohuabing in #2845
  • Change the Merge behavior to Replace for BackendTrafficPolicy by @zhaohuabing in #2888
  • shutdown drainTimeout should also affect envoy drain time by @arkodg in #2898
  • skip publishing empty status for policies by @arkodg in #2902
  • docs: multiple gatewayclass and merge gateways deployment mode by @cnvergence in #2881
  • feat: add PolicyStatus for ClientTrafficPolicy by @shawnh2 in #2895
  • Use gwapiv1a2.PolicyStatus for SecurityPolicy Status by @zhaohuabing in #2848
  • Fix oidc doc by @zhaohuabing in #2905
  • Release v1.0 by @Xunzhuo in #2909
  • fix: deployment-mode doc markdown links by @cnvergence in #2912
  • fix: QUIC listeners should only advertise HTTP/3 over ALPN, and not HTTP/2 and HTTP/1.1 by @liorokman in #2907
  • e2e: graceful envoy shutdown by @guydc in #2839
  • feat: add PolicyStatus for EnvoyPatchPolicy by @shawnh2 in #2910
  • chore: improve docs-serve by @zirain in #2920
  • api: increase rate-limit global rules limit by @ShyunnY in #2906
  • docs: add Envoy Gateway threat model by @edurra in #2915
  • Remove duplicated http filters for ExtAuth by @zhaohuabing in #2893
  • feat: expose prom port in rl svc by @ShyunnY in #2914
  • blog post for v1.0 by @arkodg in #2923
  • rm extra "that" from blog by @arkodg in #2928
  • docs: %s/Application/API/g by @arkodg in #2929
  • Pin version to v1.0.0 in 1.0.0 docs by @zhaohuabing in #2933
  • Run certgen when upgrading by @zhaohuabing in #2934
  • chore: use v1.0.0 as default for upgrade test by @guydc in #2938
  • api: connection limits by @guydc in #2709
  • docs: fix name spelling in threat model by @mrcdb in #2936
  • api: support failOpen in ext auth by @deszhou in #2908
  • API: EnvoyExtensionPolicy by @guydc in #2570
  • chore: add helm template test by @zirain in #2935
  • fix: install-egctl doc dead link by @deszhou in #2916
  • chore: fix helm-template by @zirain in #2943
  • e2e: use default shutdown mgr settings in upgrade test suite by @guydc in #2946
  • refactor: collapse eg-metrics-svc into eg-svc by @ShyunnY in #2932
  • chore: make clean should clean tools/bin by @zirain in #2945
  • build(deps): bump softprops/action-gh-release from 2.0.2 to 2.0.4 by @dependabot in #2960
  • build(deps): bump distroless/static from 49af061 to 55c6361 in /tools/docker/envoy-gateway by @dependabot in #2956
  • build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in #2959
  • build(deps): bump github/codeql-action from 3.24.6 to 3.24.7 by @dependabot in #2957
  • build(deps): bump docker/login-action from 3.0.0 to 3.1.0 by @dependabot in #2958
  • build(deps): bump helm.sh/helm/v3 from 3.14.2 to 3.14.3 by @dependabot in #2962
  • feat: support failOpen in ext auth by @deszhou in #2948
  • fix: redirect user doc by @zhaohuabing in #2977
  • Remove duplicated http filters by @zhaohuabing in #2944
  • build(deps): bump the k8s-io group with 6 updates by @dependabot in #2961
  • chore: set mergedGateways in translator runner by @cnvergence in #2971
  • api: fix gatewayclass link by @zirain in #2986
  • refactor: reuse xPolicy status methods for backendTLSPolicy by @shawnh2 in #2950
  • Add missing secrets testdata for oidc by @zhaohuabing in #2994
  • minor change to address a missing comment in #2944 by @zhaohuabing in #2992
  • docs: set up linkinator for doc site by @zirain in #2990
  • docs: remove latest from ignore list by @zirain in #2996
  • fix cors e2e test by @zhaohuabing in #3003
  • fix: do nof forward not matching prefilights to backends by @zhaohuabing in #3002
  • Fix: nil secret in resourceversiontable by @zhaohuabing in #2982
  • build(deps): bump github/codeql-action from 3.24.7 to 3.24.9 by @dependabot in #3008
  • build(deps): bump actions/deploy-pages from 4.0.4 to 4.0.5 by @dependabot in #3007
  • build(deps): bump fortio.org/log from 1.12.0 to 1.12.1 by @dependabot in #3009
  • build(deps): bump github.com/golangci/golangci-lint from 1.56.2 to 1.57.1 in /tools/src/golangci-lint by @dependabot in #3012
  • build(deps): bump github.com/prometheus/common from 0.50.0 to 0.51.1 by @dependabot in #3010
  • docs: fix squash link by @zirain in #3013
  • build(deps): bump fortio.org/fortio from 1.63.4 to 1.63.5 by @dependabot in #3011
  • ci: trigger docs action by @zirain in #3017
  • ci: fix cherrypick permission by @zirain in #2985
  • fix: set path prefix for http ext auth service by @zhaohuabing in #3018
  • feat: add Chinese language support for doc site by @wilsonwu in #2532
  • feat(translator): implement connection limit by @guydc in #2952
  • docs: remove 0.1.0 from linkinator ignore list by @yuluo-yx in #3015
  • disable connection limit test by @zhaohuabing in #3025
  • fix: use correct connection limit attribute name in e2e, docs by @guydc in #3028
  • docs: document patches in envoy proxy by @yaelSchechter in #3027
  • feat(policy): Adding BTP support for UDP/TCPRoute by @alexwo in #3004
  • fix: add missing http filters to the http filter chain by @zhaohuabing in #2970
  • ci: grant pull-requests permission to cherrypick action by @zirain in #3039
  • Update ADOPTERS.md for Airspace Link by @akhenakh in #3045
  • feat: added option to specify resources on the OIDC security policy by @jaynis in #3030
  • fix: allow websockets in url rewrite by @zetaab in #3022
  • api: support IdleTimeout in clientTrafficPolicy by @yaelSchechter in #3042
  • fix: use Patch API for infra-client by @ardikabs in #3034
  • fix: Allow Policy to attach to multiple http listeners by @liorokman in #2967
  • chore: Address unused write and tautological nilness checks by @davidalger in #3053
  • fix: BadRequest error applying JSON access log example by @davidalger in #3054
  • test: supplementary metrics test by @ShyunnY in #3037
  • api: wasm extension by @zhaohuabing in #2877
  • api: support buffer limit in clientTrafficPolicy by @yaelSchechter in #2805
  • Fix: double slashes in redirect URL by @zhaohuabing in #2998
  • feat: HeadersWithUnderscoreActions on ClientTrafficPolicy by @davidalger in #3052
  • highlight Gateway API in readme by @zirain in #3066
  • chore: bump golang to 1.22 by @Xunzhuo in #2793
  • docs: version desc by @zirain in #3065
  • fix: helm-template should explicitly set ns by @Xunzhuo in #3070
  • build(deps): bump github.com/golangci/golangci-lint from 1.57.1 to 1.57.2 in /tools/src/golangci-lint by @dependabot in #3073
  • build(deps): bump distroless/static from 55c6361 to 6732c39 in /tools/docker/envoy-gateway by @dependabot in #3074
  • build(deps): bump carloscastrojumo/github-cherry-pick-action from 1.0.9 to 1.0.10 by @dependabot in #3076
  • feat: add install and uninstall sub cmd to egctl by @ShyunnY in #2859
  • refactor: reorder fault filter by @ShyunnY in #3059
  • doc: add user guide on how to enable private key provider by @soulxu in #2533
  • fix: repeated file generation on every metrics test running by @ShyunnY in #3077
  • fix: do not create infra resources when missing translated listeners by @cnvergence in #3043
  • Set host for http health checker explicitly to avoid using the cluster name as host header for http health checking request. by @lemonlinger in #3057
  • feat(translator): implement idle timeout in ClientTrafficPolicy by @yaelSchechter in #3056
  • api: Model OpenTelelemetry Sinks as a BackendRef by @zirain in #3067
  • chore: add ignore path for codecov by @shawnh2 in #3072
  • feat(translator): Envoy Extension Policy and ExtProc by @guydc in #2991
  • fixes minor typo in http-routing guide by @eitansuez in #3088
  • fixes minor typo in http-routing guide by @zirain in #3089
  • feat(EG K8S Provider): Enable leader election for EG controller by @alexwo in #2694
  • correct kubectl command to show deployment in envoy-gateway-system na… by @eitansuez in #3090
  • feat(translator): implement buffer limit support in CTP by @yaelSchechter in #3058
  • fix: nil leader election by @zhaohuabing in #3096
  • Change route sorting order to Exact > RegularExpression > PathPrefix by @vixns in #2579
  • feat: configure overload manager by @shahar-h in #3082
  • ci: pin linkinator version in docs workflow by @shahar-h in #3097
  • team: remove LanceEA as a gateway-reviewer by @LanceEa in #3105
  • fix: infraIR duplicate port translation for merged gateways by @cnvergence in #3061
  • fixed obsolete links in the docs by @LiZhenCheng9527 in #3050
  • translator: set SpawnUpstreamSpan to true by @zirain in #3102
  • run cel validation on different k8s versions by @zirain in #3101
  • e2e: disable client timeout by @zirain in #3100
  • fix: rate limit doesn't work with two(and more) listeners by @zhaohuabing in #3085
  • dont fail CI if codecov upload fails by @arkodg in #3123
  • build(deps): bump distroless/static from 6732c39 to f41b84c in /tools/docker/envoy-gateway by @dependabot in #3121
  • fix: make setting ratelimit.backend.redis optional by @arkodg in #3128
  • docs: Translate about page into Chinese by @wilsonwu in #3035
  • build(deps): bump github.com/prometheus/common from 0.51.1 to 0.52.2 by @dependabot in #3120
  • build(deps): bump codecov/codecov-action from 3.1.5 to 4.2.0 by @dependabot in #3115
  • Revert codecov to v3 by @arkodg in #3132
  • build(deps): bump github.com/bufbuild/buf from 1.30.0 to 1.30.1 in /tools/src/buf by @dependabot in #3112
  • build(deps): bump peaceiris/actions-hugo from 2.6.0 to 3.0.0 by @dependabot in #3113
  • build(deps): bump fortio.org/fortio from 1.63.5 to 1.63.7 by @dependabot in #3119
  • docs: renames user guides to tasks by @eitansuez in #3104
  • build(deps): bump github.com/fatih/color from 1.15.0 to 1.16.0 by @dependabot in #3136
  • build(deps): bump the go-opentelemetry-io group with 9 updates by @dependabot in #3135
  • build(deps): bump github/codeql-action from 3.24.9 to 3.24.10 by @dependabot in #3116
  • refactor: infra client CreateOrUpdate to ServerSideApply by @ardikabs in #3134
  • build(deps): bump google.golang.org/grpc from 1.63.0 to 1.63.2 by @dependabot in #3141
  • docs: fix dead links by @zirain in #3146
  • release: v1.0.1 by @Xunzhuo in #3144
  • ci: remove continue-on-error by @zirain in #3150
  • build(deps): bump golang.org/x/sys from 0.18.0 to 0.19.0 by @dependabot in #3117
  • fix: date and sync release note to v1.0.1 by @Xunzhuo in #3152
  • docs: renames user guides to 'tasks' for v1.0 by @eitansuez in #3155
  • fix egctl does not support custom controller name. by @qicz in #3129
  • Refactor and fix early return: HTTP Listener XDS translator by @zhaohuabing in #2981
  • fix: remove no needed new pointer creation by @Xunzhuo in #2739
  • feat: add trace for rate-limit by @ShyunnY in #2974
  • docs: fix typo in release process by @wilsonwu in #3175
  • feat: implment BackendRefs in EnvoyProxy by @zirain in #3080
  • fix: delete tab character by @yigang01 in #3169
  • docs: move contribution out of version by @zirain in #3176
  • chore: update golint by @zirain in #3177
  • docs: support notImplementedHide by @zirain in #2849
  • refactor: group xds security features for security policy by @shawnh2 in #3019
  • fix: use ptr.To[uint32] intead of func()*uint32 by @ShyunnY in #3187
  • api: gRPC Access Log Service (ALS) sink by @davidalger in #3078
  • build(deps): bump golang.org/x/net from 0.23.0 to 0.24.0 by @dependabot in #3193
  • fix merge race caused by #3078 by @shawnh2 in #3196
  • docs: Generate enum documentation by @liorokman in #3186
  • docs: provides a suggested path through the docs after the quickstart by @eitansuez in #3185
  • fix merge race caused by #3185 by @shawnh2 in #3197
  • fix(chart): set ttlSecondsAfterFinished on certgen job to 30 by default by @JuniorJPDJ in #3156
  • api: fix WasmCodeSourceType enum validation by @eguzki in #3203
  • api: ext-proc timeout, fail-open, backendRefs by @guydc in #3087
  • build(deps): bump sigs.k8s.io/controller-runtime from 0.17.2 to 0.17.3 by @dependabot in #3192
  • build(deps): bump github.com/prometheus/common from 0.52.2 to 0.52.3 by @dependabot in #3194
  • build(deps): bump helm.sh/helm/v3 from 3.14.3 to 3.14.4 by @dependabot in #3195
  • docs: translate release announcement and process into Chinese by @wilsonwu in #3166
  • docs: use tabpane by @zirain in #3208
  • Use - for naming service and container ports by @arkodg in #3130
  • API: HTTP Filter ordering by @zhaohuabing in #2993
  • e2e: disable GatewayInfraResourceTest by @zirain in #3205
  • chore: use golang 1.N.P version syntax by @guydc in #3215
  • feat: support HTTP compression on stats/prometheus by @zufardhiyaulhaq in #3201
  • api: ext-proc processing mode by @guydc in #3171
  • fix: match serviceName in tracing with mergedGateways topology by @cnvergence in #3214
  • ci: move write permissions to job level in cherrypick workflow by @shahar-h in #3219
  • docs: replaces json patch bodies with yaml format by @eitansuez in #3184
  • Feat: Support for loadBalancerSourceRanges on the envoy service by @jaynis in #2878
  • feat: add support for optional JWT authentication by @ardikabs in #3157
  • Use native per-route config for basic auth by @zhaohuabing in #3182
  • docs: fix zh content, translate docs page and add zh standard page by @wilsonwu in #3216
  • feat: add requiredClientCertificate on mutual TLS to make it optional by @zufardhiyaulhaq in #3199
  • fix flaky ext auth e2e by @zhaohuabing in #3221
  • feat: Wasm extension HTTP code source by @zhaohuabing in #3164
  • Run Envoy Gateway like DaemonSet by @zvlb in #3092
  • feat: add enable stats for peer endpoint of envoyproxy by @ShyunnY in #3145
  • docs: Translate quickstart of user guide page into Chinese by @terry-chao in #3148
  • docs: extProc is an optional field by @ardikabs in #3224
  • build(deps): bump github.com/miekg/dns from 1.1.58 to 1.1.59 by @dependabot in #3239
  • build(deps): bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in #3236
  • build(deps): bump github/codeql-action from 3.24.10 to 3.25.1 by @dependabot in #3235
  • build(deps): bump sphinx from 7.2.6 to 7.3.7 in /tools/src/sphinx-build by @dependabot in #3240
  • build(deps): bump actions/download-artifact from 4.1.4 to 4.1.5 by @dependabot in #3233
  • build(deps): bump github.com/prometheus/common from 0.52.3 to 0.53.0 by @dependabot in #3238
  • crds: cleanup and fix comment by @zirain in #3228
  • build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.2 by @dependabot in #3234
  • crds: remove status by @zirain in #3229
  • HTTP2 settings API by @zhaohuabing in #3222
  • feat: support egctl install output manifests and fix bugs by @ShyunnY in #3227
  • chore: update envoypatch test by @zirain in #3231
  • docs: Fix commands for testing jwt based routing by @biefy in #3243
  • feat: http2 listener setting impl by @zhaohuabing in #3249
  • docs(zh): translate code of conduct and code owner page and fix standard page problem by @wilsonwu in #3241
  • api: Enable controlling the HTTP version used to connect to the backend by @liorokman in #2433
  • fix: make Write create files without the executable bit set by @liorokman in #3255
  • chore: fix eep targetRef doc by @guydc in #3248
  • docs: (#3137) show 'apply yaml' either from stdin, or from file using… by @eitansuez in #3223
  • e2e: add e2e test for MergeGateways feature by @shawnh2 in #2665
  • ci: add osv-scanner workflow by @shahar-h in #3261
  • docs: Fix global rate limit doc for sourceCIDR type by @owenhaynes in #3256
  • chore: add protos to gen-check and regenerate protos by @shahar-h in #3266
  • fix: Add SourceMatchType validation for acceptable values by @owenhaynes in #3260
  • refactor: remove explicit test case definition for xds translator test by @shawnh2 in #3230
  • Sync envoyproxy docs from latest into v1.0.1 by @arkodg in #3268
  • feat: Implement useClientProtocol by @liorokman in #3254
  • feat: support backend tls settings with envoyproxy by @alexwo in #3218
  • chore: resolve protoc-gen-go-grpc vulnerability by @shahar-h in #3267
  • fix CI by @zhaohuabing in #3277
  • ci: add trivy image vulnerabilities scan workflow by @shahar-h in #3287
  • ci: add badges for security scans by @shahar-h in #3288
  • lint: enable gofumpt by @zirain in #3291
  • doc: update oidc docs by @zhaohuabing in #3275
  • e2e: disable unstable tests by @zirain in #3306
  • feat(translator): extproc timeout, failopen and backendRefs by @guydc in #3206
  • build(deps): bump actions/upload-artifact from 4.3.2 to 4.3.3 by @dependabot in #3300
  • build(deps): bump actions/download-artifact from 4.1.5 to 4.1.7 by @dependabot in #3299
  • build(deps): bump github/codeql-action from 3.25.1 to 3.25.3 by @dependabot in #3297
  • build(deps): bump the go-opentelemetry-io group with 8 updates by @dependabot in #3295
  • build(deps): bump myst-parser from 2.0.0 to 3.0.1 in /tools/src/sphinx-build by @dependabot in #3294
  • e2e: fix connectionLimit e2e test by @ShyunnY in #3292
  • chore: fix lint by @zirain in #3309
  • build(deps): bump distroless/static from f41b84c to e9ac71e in /tools/docker/envoy-gateway by @dependabot in #3301
  • build(deps): bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in #3298
  • docs: updates task testing instructions to use tabs for with|without external load balancer by @eitansuez in #3284
  • e2e: disable EGUpgradeTest by @zirain in #3310
  • chore: Bump k8s.io by @zirain in #3281
  • helm: use IfNotPresent for versioned helm chart release by @zirain in #3289
  • e2e: Add an e2e test for useClientProtocol by @liorokman in #3314
  • fix helm IfNotPresent by @zirain in #3320
  • bump github.com/envoyproxy/go-control-plane by @mmorel-35 in #3286
  • chore: remove redundant spaces by @yuluo-yx in #3319
  • build(deps): bump github.com/golangci/golangci-lint from 1.57.2 to 1.58.0 in /tools/src/golangci-lint by @dependabot in #3330
  • build(deps): bump golang.org/x/sys from 0.19.0 to 0.20.0 by @dependabot in #3326
  • build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.0 by @dependabot in #3328
  • build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 in /tools/github-actions/setup-deps by @dependabot in #3329
  • build(deps): bump sigs.k8s.io/controller-runtime from 0.18.0 to 0.18.1 by @dependabot in #3327
  • e2e: fix flaky merge-gateways test by @shawnh2 in #3331
  • fix: add proxy protocol always as first listenerFilter by @zetaab in #3332
  • refactor: refactor TCP IR by @aoledk in #3271
  • docs(zh): translate contributing doc into Chinese by @wilsonwu in #3308
  • feat: support custom HTTP filter ordering by @zhaohuabing in #3273
  • docs: document client idle timeout by @yaelSchechter in #3325
  • feat: expose shutdownmanager image to EnvoyGageway API by @zhaohuabing in #3269
  • bump gatewayapi to 1.1.0-rc2 by @zirain in #3336
  • refactor: separate conditions computing for listeners and routes into status pkg by @shawnh2 in #2951
  • feat: add xRoute and xPolicy support for egctl x status by @shawnh2 in #2949
  • docs: document buffer limit for client by @yaelSchechter in #3324
  • fix: sort gateways by creation timestamp before translate by @shawnh2 in #3344
  • chore: correct typos in comments and code by @shawnh2 in #3349
  • feat: support access log formatters by @aoledk in #3303
  • chore: add gateway-api/apis/v1alpha3 to k8s client support by @shawnh2 in #3350
  • feat(api): Add support for the header hash policy by @harrisonturton in #3342
  • Bump Gateway API v1.1.0 by @zirain in #3356
  • api: unhide FilterOrder by @zirain in #3358
  • chore: bump golang to 1.22.3 by @shahar-h in #3351
  • docs: fix broken BackendTLSPolicy samples by @shahar-h in #3362
  • feat(translator): Implement header hash policy for consistent hash load balancers by @harrisonturton in #3357
  • feat: add envoy extension policy support for egctl x status by @shawnh2 in #3363
  • fix: match SNI when using TLS listeners with hostname by @michaelbeaumont in #2942
  • api: Authorization API design by @zetaab in #2652
  • refactor: group xds backend traffic features for BackendTrafficPolicy by @shawnh2 in #3189
  • build(deps): bump github/codeql-action from 3.25.3 to 3.25.4 by @dependabot in #3383
  • build(deps): bump github.com/prometheus/client_golang from 1.19.0 to 1.19.1 by @dependabot in #3375
  • fix: security policy reference grant from field type by @eguzki in #3386
  • build(deps): bump actions/checkout from 4.1.4 to 4.1.5 by @dependabot in #3382
  • build(deps): bump google/osv-scanner-action from 1.7.1 to 1.7.3 by @dependabot in #3379
  • build(deps): bump sigs.k8s.io/controller-runtime from 0.18.1 to 0.18.2 by @dependabot in #3374
  • chore: update GRPCRoute version for examples by @shawnh2 in #3391
  • build(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 by @dependabot in #3377
  • build(deps): bump google.golang.org/protobuf from 1.34.0 to 1.34.1 by @dependabot in #3376
  • feat: add metrics instrumentation for status updater by @shawnh2 in #3347
  • doc: update EG control-plane metrics design & usage by @shawnh2 in #3346
  • feat(api): add consistent hash table size api by @aoledk in #3348
  • docs: update helm install docs by @yuluo-yx in #3370
  • build(deps): bump github.com/golangci/golangci-lint from 1.58.0 to 1.58.1 in /tools/src/golangci-lint by @dependabot in #3378
  • build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @dependabot in #3381
  • tcproute/udproute support multiple backends by @zirain in #3212
  • refactor: refactor UDP IR by @aoledk in #3373
  • feat: add supported features to gateway class by @levikobi in #2491
  • API: Backend by @guydc in #3063
  • feat(api): add idleTimeout to ClientTrafficPolicy for TCP listener by @aoledk in #3345
  • fix: build is failing by @zhaohuabing in #3402
  • build(deps): bump aquasecurity/trivy-action from 0.19.0 to 0.20.0 by @dependabot in #3380
  • docs(zh): translate Developer Guide and related docs into Chinese by @wilsonwu in #3384
  • fix: duplicated xroutes are added to gatewayapi.Resources by @aoledk in #3282
  • ci: add license scan workflow by @shahar-h in #3407
  • feat: add global image settings for all images in the EG chart by @zhaohuabing in #3389
  • docs(zh): translate Install docs into Chinese by @wilsonwu in #3403
  • doc: merge announcements and blogs into news by @shawnh2 in #3417
  • chore: support multi nodes cluster by @zirain in #3422
  • docs(zh): translate releases docs (1.0.0 and 1.0.1 only) into Chinese by @wilsonwu in #3413
  • ci: fix codecov upload issue by @shahar-h in #3421
  • ci: fix codecov upload on dependabot PRs by @shahar-h in #3439
  • fix(translator): set ignoreCase for header matchers in extAuth by @haoqixu in #3420
  • feat: add metrics instrumentation for xds server by @shawnh2 in #3393
  • feat: PreserveExternalRequestID on ClientTrafficPolicy by @ardikabs in #3225
  • feat: add knob for switching container port by @zvlb in #3333
  • bug: Route extension filters with different types but the same name and namespace aren't correctly cached by @liorokman in #3388
  • chore: enable gci in golangci-lint by @shawnh2 in #3437
  • feat: support BackendRef HTTP filters by @cnvergence in #3246
  • feat: support forward client cert config XFCC header by @zufardhiyaulhaq in #3202
  • build(deps): bump helm.sh/helm/v3 from 3.14.4 to 3.15.0 by @dependabot in #3436
  • ci: update codecov-action and remove workaround by @shahar-h in #3442
  • build(deps): bump google.golang.org/grpc from 1.63.2 to 1.64.0 by @dependabot in #3435
  • docs(zh): sync #3417 combine blog and release to news by @wilsonwu in #3438
  • build(deps): bump github/codeql-action from 3.25.4 to 3.25.5 by @dependabot in #3427
  • build(deps): bump sigs.k8s.io/kind from 0.22.0 to 0.23.0 in /tools/src/kind by @dependabot in #3428
  • build(deps): bump softprops/action-gh-release from 2.0.4 to 2.0.5 by @dependabot in #3429
  • build(deps): bump github.com/bufbuild/buf from 1.31.0 to 1.32.0 in /tools/src/buf by @dependabot in #3430
  • build(deps): bump github.com/golangci/golangci-lint from 1.58.1 to 1.58.2 in /tools/src/golangci-lint by @dependabot in #3431
  • build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 by @dependabot in #3434
  • build(deps): bump the k8s-io group with 6 updates by @dependabot in #3433
  • build(deps): bump actions/checkout from 4.1.5 to 4.1.6 by @dependabot in #3432
  • api: add the buffer limit knob to the cluster by @ShyunnY in #3390
  • API: Follow up on XFCC header by @zhaohuabing in #3443
  • docs:use server side apply when installing EG using kubectl by @arkodg in #3451
  • refactor telemetry backendRefs by @zirain in #3293
  • fix: filter BackendTLSPolicy by namespace by @haoqixu in #3424
  • fix: Grafana dashboards conformance by @BadLiveware in #3448
  • doc: add Envoy Gateway exported metrics by @shawnh2 in #3446
  • feat(policy): Add CTP support for TCP/TLS listeners by @aoledk in #3337
  • feat: supports custom metrics sink export period and timeout by @ShyunnY in #3103
  • refactor: error processing for xPolicy by @shawnh2 in #3302
  • feat: support caCerts in secrets by @ShyunnY in #3211
  • doc: update api doc by @zirain in #3416
  • feat: adding support for ext auth and backend mtls by @alexwo in #3441
  • chore: update matrix by @zirain in #3458
  • chore: fix ci by @guydc in #3465
  • chore: use sets.Set[T] instead of map[T]struct{} by @zirain in #3471
  • feat(translator): Implement consistent hash table size in BackendTrafficPolicy by @aoledk in #3440
  • feat(translator): Implement tcp idle timeout in ClientTrafficPolicy by @aoledk in #3459
  • fix api wording by @zirain in #3467
  • Trigger a reconcile when EnvoyProxy backendRefs changes by @zirain in #3472
  • bug: Tests are failing due to an expired certificate in one of the translator tests by @liorokman in #3476
  • e2e: skip UseClientProtocolTest by @zirain in #3478
  • fix: EEP RG enforcement by @guydc in #3475
  • feat(docs): add adopter section in doc main page by @wilsonwu in #3466
  • docs: use helm-docs template by @zirain in #3492
  • build(deps): bump aquasecurity/trivy-action from 0.20.0 to 0.21.0 by @dependabot in #3482
  • build(deps): bump github.com/golangci/golangci-lint from 1.58.2 to 1.59.0 in /tools/src/golangci-lint by @dependabot in #3490
  • build(deps): bump the go-opentelemetry-io group with 8 updates by @dependabot in #3485
  • build(deps): bump sigs.k8s.io/controller-runtime from 0.18.2 to 0.18.3 by @dependabot in #3486
  • build(deps): bump fortio.org/fortio from 1.63.7 to 1.63.8 by @dependabot in #3487
  • build(deps): bump github.com/bufbuild/buf from 1.32.0 to 1.32.1 in /tools/src/buf by @dependabot in #3484
  • build(deps): bump github/codeql-action from 3.25.5 to 3.25.6 by @dependabot in #3483
  • build(deps): bump helm.sh/helm/v3 from 3.15.0 to 3.15.1 by @dependabot in #3489
  • build(deps): bump github.com/go-logr/logr from 1.4.1 to 1.4.2 by @dependabot in #3488
  • helm: support ratelimit image pull secrets and pull policy by @zhaohuabing in #3454
  • feat: add metrics instrumentation for infra manager by @shawnh2 in #3463
  • ext_auth support backendRefs by @zirain in #3469
  • feat: authorization implementation by @zhaohuabing in #3399
  • feat: impl cluster buffer limit by @ShyunnY in #3479
  • build(deps): bump codespell from 2.2.6 to 2.3.0 in /tools/src/codespell by @dependabot in #3481
  • feat: Optionally override Oauth Cookie Names by @sam-burrell in #3274
  • fix api nit by @zirain in #3497
  • fix secrets/configmap updates do not trigger a controller reconcile by @alexwo in #3499
  • chore: improve extension server unit tests by @liorokman in #3503
  • feat: Support connecting to an Envoy Gateway Extension Server over Unix Domain Sockets by @liorokman in #3494
  • o11y: add grafana dashboard for control plane metrics by @shawnh2 in #3506
  • feat(translator): support disabling X-RateLimit headers by @evacchi in #3397
  • feat: backend TLS SAN validation by @guydc in #3507
  • feat: Adding extension server policy handling. by @liorokman in #3371
  • fix: Reduce the amount of memory used by the in-memory extension manager gRPC server buffer by @liorokman in #3512
  • API: add more oidc configuration settings by @zhaohuabing in #3423
  • api: cookie based consistent hashing by @arkodg in #3444
  • feat: add generate API and Helm doc process with zh content update by @wilsonwu in #3418
  • fix: merge race between #3418 and #3444,#3423 by @shawnh2 in #3513
  • chore: update codecov ignore path by @shawnh2 in #3523
  • build(deps): bump github/codeql-action from 3.25.6 to 3.25.7 by @dependabot in #3518
  • build(deps): bump github.com/bufbuild/buf from 1.32.1 to 1.32.2 in /tools/src/buf by @dependabot in #3517
  • build(deps): bump fortio.org/fortio from 1.63.8 to 1.63.9 by @dependabot in #3516
  • build(deps): bump docker/login-action from 3.1.0 to 3.2.0 by @dependabot in #3519
  • feat(oidc): implement additional OIDC configuration settings by @zetaab in #3514
  • fix client backend mtls secrets updates by @alexwo in #3526
  • feat(translator): Add names to filterchains based on the listener name by @liorokman in #3524
  • api: support user provided names for generated k8s resources by @arkodg in #3527
  • feat: Enable the configuration of topologySpreadConstraints for the EG control plane. by @alexwo in #3535
  • docs: highlight default 15s request timeout by @arkodg in #3529
  • feat(translator): implement backend API by @guydc in #3495
  • helm: add envoy gateway addon helm chart support by @shawnh2 in #3470
  • fix: ReplaceFullPath not working for root path (/) by @arkodg in #3530
  • chore: remove redundant helm-package command by @shawnh2 in #3539
  • feat: keep core features supported when skipping extended tests by @levikobi in #3520
  • chore: Remove namespace restriction for EnvoyProxy parametersRef reso… by @phantooom in #3544
  • fix: doc broken links by @guydc in #3553
  • chore: bump go to 1.22.4 by @guydc in #3552
  • docs: Update docs on gwapi support for backendref filters by @cnvergence in #3558
  • feat: support custom names for generated k8s resources by @arkodg in #3537
  • build(deps): bump aquasecurity/trivy-action from 0.21.0 to 0.22.0 by @dependabot in #3578
  • build(deps): bump github/codeql-action from 3.25.7 to 3.25.8 by @dependabot in #3576
  • build(deps): bump google/osv-scanner-action from 1.7.3 to 1.7.4 by @dependabot in #3577
  • build(deps): bump fortio.org/fortio from 1.63.9 to 1.63.10 by @dependabot in #3571
  • bug: ClientTrafficPolicy resources are prevented from targeting a SectionName by an incorrect CEL validation by @liorokman in #3580
  • docs: backend by @guydc in #3550
  • build(deps): bump sigs.k8s.io/controller-runtime from 0.18.3 to 0.18.4 by @dependabot in #3575
  • chore: automatically import Grafana dashboards when installing gateway-addons-helm by @shawnh2 in #3556
  • build(deps): bump github.com/golangci/golangci-lint from 1.59.0 to 1.59.1 in /tools/src/golangci-lint by @dependabot in #3579
  • chore: update make helm-readme-gen by @shawnh2 in #3555
  • chore: fix gen-check by @zirain in #3585
  • ci: fix osv-scanner action by @zirain in #3586
  • bug: cel tests are always run on a single version of Kubernetes by @liorokman in #3584
  • build(deps): bump github.com/prometheus/common from 0.53.0 to 0.54.0 by @dependabot in #3573
  • feat(api): Add http health check api to ClientTrafficPolicy by @aoledk in #3540
  • feat: Allow configuring tolerations for the EG control plane installed via Helm by @coro in #3587
  • feat: adding pod disruption budget support for envoy proxies by @alexwo in #3583
  • e2e: basic multiple gc test by @cnvergence in #2707
  • Feat: adding support for PodDisruptionBudget with eg control plane by @alexwo in #3545
  • release: v1.0.2 by @Xunzhuo in #3594
  • docs: sync 1.0.2 release note to 1.0.2 and fix CI by @Xunzhuo in #3605
  • fix: egctl x status gatewayclass example msg by @Xunzhuo in #3606
  • helm: add more addons for gateway-addons-helm by @shawnh2 in #3541
  • feat(translator): support switching between service/clusterIP routing by @evacchi in #3543
  • chore: enable importas for lint by @shawnh2 in #3603
  • feat(translator): Support extension server hooks for TCP and UDP listeners in addition to HTTP listeners. by @liorokman in #3522
  • doc: add certgen description into chart readme by @ShyunnY in #3569
  • feat(translator): Implement http health check filter by @aoledk in #3596
  • feat(translator): Add formatter support for OpenTelemetry access logger by @aoledk in #3597
  • docs(zh): translate roadmap into Chinese by @wilsonwu in #3531
  • build(deps): bump github.com/miekg/dns from 1.1.59 to 1.1.61 by @dependabot in #3616
  • build(deps): bump github/codeql-action from 3.25.8 to 3.25.10 by @dependabot in #3619
  • add CEL validation for BackendRef Group by @phantooom in #3557
  • feat: support plural targetRefs on policies by @liorokman in #3581
  • build(deps): bump the k8s-io group with 6 updates by @dependabot in #3612
  • build(deps): bump go.opentelemetry.io/proto/otlp from 1.2.0 to 1.3.1 in the go-opentelemetry-io group by @dependabot in #3613
  • build(deps): bump codecov/codecov-action from 4.4.1 to 4.5.0 by @dependabot in #3618
  • build(deps): bump github.com/bufbuild/buf from 1.32.2 to 1.33.0 in /tools/src/buf by @dependabot in #3620
  • build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @dependabot in #3614
  • build(deps): bump actions/checkout from 4.1.6 to 4.1.7 by @dependabot in #3617
  • build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2 by @dependabot in #3615
  • docs(zh): translate release note 1.0.2 into Chinese by @wilsonwu in #3636
  • docs: ext-proc by @guydc in #3608
  • oidc: preserve authorization header by @zhaohuabing in #3567
  • feat: support attaching EnvoyProxy resource to Gateways by @haoqixu in #3532
  • fix: envoy shutdown flaky test by @guydc in #3646
  • fix: do not propagate well-known port number for xds portRedirect by @shawnh2 in #3628
  • follow-up: update docs and ci pipeline to utilize gateway-addons-helm by @shawnh2 in #3610
  • fix: add retries to ext-proc tests by @guydc in #3641
  • api: Adding Zipkin Tracing support by @alexandermarston in #3630
  • build(deps): bump fortio.org/fortio from 1.63.10 to 1.65.0 by @dependabot in #3658
  • build(deps): bump softprops/action-gh-release from 2.0.5 to 2.0.6 by @dependabot in #3656
  • build(deps): bump helm.sh/helm/v3 from 3.15.1 to 3.15.2 by @dependabot in #3657
  • build(deps): bump github.com/bufbuild/buf from 1.33.0 to 1.34.0 in /tools/src/buf by @dependabot in #3659
  • build(deps): bump aquasecurity/trivy-action from 0.22.0 to 0.23.0 by @dependabot in #3655
  • docs: introduce shortcode boilerplate by @zirain in #3652
  • refactor: refactor client/backend connection by @ShyunnY in #3650
  • docs: remove docs-api-headings by @zirain in #3653
  • chore: update PR template to highlight the api changes by @shawnh2 in #3637
  • chore: update gateway-addons-helm by @zirain in #3649
  • docs: rm backend redirect docs by @arkodg in #3591
  • feat: implement zipkin tracing by @alexandermarston in #3668
  • docs: rm active development alert by @arkodg in #3674
  • docs: fix GATEWAY_HOST address for v1.0.2 and latest docs by @arkodg in #3676
  • api: support AccessLog filter by @zirain in #3669
  • chore: cleanup and upgrade some api to v1 by @shawnh2 in #3644
  • Add benchmark testing framework by @shawnh2 in #3599
  • feat: Wasm OCI image by @zhaohuabing in #3564
  • feat: add resources dashboard for envoy gateway by @shawnh2 in #3689
  • feat: AccessLog support CEL Filter by @zirain in #3688
  • docs: Fix typo in bootstrap config by @pingiun in #3710
  • chore: preallocate a list of addresses by @sanposhiho in #3712
  • chore: remove incorrect comment by @zirain in #3716
  • chore: add "extproc" to extproc ir name by @zhaohuabing in #3697
  • chore: move benchmark-test job in build_and_test.yaml by @shawnh2 in #3692
  • build(deps): bump github/codeql-action from 3.25.10 to 3.25.11 by @dependabot in #3723
  • build(deps): bump google/osv-scanner-action from 1.7.4 to 1.8.1 by @dependabot in #3721
  • build(deps): bump github.com/docker/cli from 26.1.3+incompatible to 27.0.2+incompatible by @dependabot in #3718
  • build(deps): bump github.com/google/go-containerregistry from 0.19.1 to 0.19.2 by @dependabot in #3720
  • build(deps): bump github.com/docker/docker from 26.1.3+incompatible to 27.0.2+incompatible by @dependabot in #3719
  • build(deps): bump github.com/prometheus/common from 0.54.0 to 0.55.0 by @dependabot in #3717
  • docs: Modify prerequisite go version by @sanposhiho in #3711
  • docs: install with brew by @zirain in #3714
  • build(deps): bump github.com/docker/docker from 26.1.3+incompatible to 27.0.3+incompatible by @dependabot in #3726
  • docs: sync brew to v1.0.2 by @zirain in #3729
  • feat(translator): xds route and vhost metadata by @guydc in #3602
  • feat: gRPC Access Log Service (ALS) sink by @zirain in #3626
  • bump go to 1.22.5 by @zirain in #3732
  • fix merge conflict by @zirain in #3733
  • e2e: fix accesslog test by @zirain in #3736
  • e2e: add CEL to accesslog test by @zirain in #3730
  • refactor: rename control-plane metrics by @shawnh2 in #3727
  • feat: Implement target selectors for policies. by @liorokman in #3704
  • e2e: Add backend health check e2e case via active http by @aoledk in #3677
  • doc: add benchmarking section in contribution page by @shawnh2 in #3709
  • feat: cookie based consistent hashing by @arkodg in #3683
  • chore: show golang version in the version command by @zhaohuabing in #3750
  • xds: should use TCP as default protocol by @zirain in #3749
  • chore: enable lint for benchmark by @zirain in #3754
  • fix flaky wasm download test by @zhaohuabing in #3759
  • e2e: zkipin tracing test by @zirain in #3748
  • feat: mark programmed=false with an error when too many addresses are assigned by @sanposhiho in #3713
  • docs: CEL Expressions for Access Logging by @zirain in #3739
  • docs: zikpin tracer by @zirain in #3762
  • chore: update grafana dashboards by @shawnh2 in #3746
  • docs for customized filter order by @zhaohuabing in #3761
  • build(deps): bump actions/download-artifact from 4.1.7 to 4.1.8 by @dependabot in #3776
  • fix basic auth doc by @zhaohuabing in #3786
  • api: make accesslog format optional by @zirain in #3770
  • fix: fill missing clusterIP for service in egctl x translate by @shawnh2 in #3708
  • build(deps): bump the go-opentelemetry-io group with 8 updates by @dependabot in #3779
  • build(deps): bump actions/upload-artifact from 4.3.3 to 4.3.4 by @dependabot in #3777
  • build(deps): bump github.com/docker/cli from 27.0.2+incompatible to 27.0.3+incompatible by @dependabot in #3781
  • docs: move Compatibility Matrix page out of version by @zirain in #3767
  • release: v1.1.0-rc.1 by @guydc in #3791
  • fix release note file name by @guydc in #3801
  • release/v1.1: pin envoy version by @guydc in #3933
  • [release/v1.1] cherry-pick main by @guydc in #3935

New Contributors

Full Changelog: v1.0.2...v1.1.0

Don't miss a new gateway release

NewReleases is sending notifications on new releases.