envoyproxy/gateway v1.8.0-rc.1

on GitHub

What's Changed

• e2e: speed tracing tests by @zirain in #8124
• fix(translator): allow single-label backends in host mode by @codefromthecrypt in #8123
• ci: release json report by @zirain in #8107
• fix oidc flakiness by @zhaohuabing in #8119
• fix: skip_test_workflow doesn't exist by @dylanmtaylor in #8116
• fix e2e test panic by @zhaohuabing in #8109
• chore: bump func-e to v1.4.0 by @codefromthecrypt in #8105
• fix: route idle timeout by @zhaohuabing in #8058
• docs: add Mirakl to adopters list by @twandja in #8138
• docs: add security warning to control plane extensions by @guydc in #7967
• chore: add lint for release notes filenames by @zirain in #8137
• fix: remove global logger in message package by @zirain in #8131
• docs: fix url result of regex rewrite by @SadmiB in #7864
• chore: log skipped xds by @zhaohuabing in #8132
• docs: fixes for OPA sidecar + Unix Domain Socket task by @millermatt in #8142
• fix: basic auth validation by @zhaohuabing in #8053
• fix: controller cache-sync readiness check by @jukie in #7430
• fix: replace context.TODO with timeout context in config dump by @jaffarkeikei in #8122
• refactor: convert IR map fields to slices to ensure deterministic Dee… by @Junnygram in #7953
• fix links in releasing and develop docs by @cnvergence in #8141
• docs: add provider guide for entra by @oliverbaehler in #7977
• chore: clean up test output files by @zhaohuabing in #8154
• fix: TCPRoute mTLS didn't work by @zirain in #8152
• v1.7.0-rc2 release notes by @cnvergence in #8163
• chore(docs): Update Azure Entra link in OIDC guide by @guydc in #8167
• fix: continue processing the remaining xDS with invalid EnvoyPatchPolicies by @zhaohuabing in #8153
• build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #8178
• fix: skip provision when IR Infra is invalid by @zirain in #7754
• docs: add HTTP header and method based authentication task by @Aditya7880900936 in #7990
• fix: Validation of XListenerSet certificateRefs by @krishicks in #8168
• fix: Remove whitespace for nodeSelector in deployment YAML - helm chart change by @jess-belliveau in #8185
• [release/v1.7.0] release notes by @cnvergence in #8188
• [release/v1.7] v1.7.0 release docs and announcement by @cnvergence in #8191
• [release/v1.7.0] update eg upgrade test and fix ordering by @cnvergence in #8195
• docs: reword updating shortcode prefixes in releasing.md by @cnvergence in #8196
• build(deps): bump busybox from e226d63 to b3255e7 in /tools/docker/envoy-gateway by @dependabot[bot] in #8175
• build(deps): bump distroless/base-nossl from 16b3bc2 to d90f132 in /tools/docker/envoy-gateway by @dependabot[bot] in #8174
• chore: enable DisallowUnknownFields for xds translator by @zirain in #8203
• chore bump golang 1.25.7 by @zirain in #8205
• build(deps): bump the gomod group across 1 directory with 11 updates by @dependabot[bot] in #8177
• feat(helm): add commonLabels support to helm chart by @gaganhr94 in #8078
• build(deps): bump the helm group across 1 directory with 3 updates by @dependabot[bot] in #8179
• fix(gatewayapi): reject ClientTrafficPolicy with invalid TLS cipher by @Junnygram in #8040
• feat (translator): support optional health check configuration by @cryoshida in #7959
• chore: install crds separated by @zirain in #8223
• chore: fix make gen-check by @zirain in #7937
• fix: XListenerSet allows route from same namespace by @krishicks in #8226
• fix gateway api crd gen by @zhaohuabing in #8238
• chore: fix flaky retry test by @zirain in #8020
• feat: support ShadowMode in local ratelimit by @zirain in #8076
• chore: add missing release notes for #8076 by @zirain in #8243
• chore: remove useless address by @zirain in #8216
• release notes for v1.6.4 by @zirain in #8221
• release notes for v1.5.9 by @zirain in #8219
• update release notes by @zirain in #8253
• fix: re-enable ext-auth timeout test by @zirain in #8070
• chore: fix ExtAuthTimeout flaky by @zirain in #8255
• doc: bump v1.5.9 by @zirain in #8256
• docs: bump version by @zirain in #8257
• chore: Update default kind and metallb versions by @jukie in #8254
• chore: update v1.6 compatibility matrix versions by @rudrakhp in #8260
• build(deps): bump github/codeql-action from 4.32.1 to 4.32.2 in the actions group across 1 directory by @dependabot[bot] in #8248
• build(deps): bump the k8s-io group across 1 directory with 6 updates by @dependabot[bot] in #8249
• build(deps): bump the gomod group across 2 directories with 3 updates by @dependabot[bot] in #8246
• build(deps): bump the helm group across 1 directory with 5 updates by @dependabot[bot] in #8250
• feat: enable command operators for httproute filter directresponse by @6ixfalls in #8183
• fix test race by @zirain in #8180
• chore: update experimental conformance by @zirain in #8269
• feat: jaX fingerprint support by @Inode1 in #7983
• feat: support egctl config envoy-gateway by @zhaohuabing in #8251
• fix: API key auth by @zhaohuabing in #8267
• feat: Add WeightedZones to PreferLocalZones by @jukie in #7251
• docs: render crds in example install command by @NilsGriebner in #8225
• chore: Fix JA Fingerprint ipv6 e2e by @jukie in #8298
• build(deps): bump github.com/envoyproxy/go-control-plane/envoy from 1.36.1-0.20260127060829-c81ce9094f67 to 1.37.0 by @dependabot[bot] in #8292
• build(deps): bump the actions group across 1 directory with 6 updates by @dependabot[bot] in #8296
• build(deps): bump distroless/base-nossl from d90f132 to f8ebb45 in /tools/docker/envoy-gateway by @dependabot[bot] in #8290
• build(deps): bump prometheus from 28.9.0 to 28.9.1 in /charts/gateway-addons-helm in the helm group across 1 directory by @dependabot[bot] in #8297
• build(deps): bump the gomod group across 1 directory with 2 updates by @dependabot[bot] in #8303
• Use sub-chart for CRDs to reduce chart size by @jukie in #8283
• chore: gh action for running gen check by @rudrakhp in #8304
• fix: add mutex lock to snapshot cache OnStreamResponse/OnStreamDeltaResponse by @jaffarkeikei in #8277
• docs: update proxy protocol docs for client traffic policies by @kraashen in #8310
• fix release notes order in the docs by @cnvergence in #8316
• e2e: improve SessionPersistence tests by @zirain in #8207
• bump Gateway API v1.5.0-rc.1 by @zirain in #8161
• feat: Add support for Dynamic Modules by @jukie in #8278
• fix: fixed local object reference resolution from parent in merged BackendTrafficPolicies by @rudrakhp in #8210
• fix: exclude unmanaged route parents from xPolicy status ancestors by @zhaohuabing in #8321
• fix(kubernetes): apply namespace selector filtering to List operations by @shahar-h in #8312
• fix: samplingFraction not working by @zirain in #8317
• chore: skip head repo check in gen check command by @rudrakhp in #8347
• build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #8342
• revist TLSRoute conformance test by @zirain in #8345
• chore: adopt FailFast by @zirain in #8335
• fix ConsistentHashLoadBalancing flaky by @zirain in #8349
• build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #8343
• build(deps): bump sigs.k8s.io/gateway-api-inference-extension from 1.3.0 to 1.3.1 in /examples/extension-server by @dependabot[bot] in #8340
• fix ListenerSet conformance test by @zirain in #8344
• bump Gateway API v1.5.0 by @zirain in #8348
• fix: watch TLSRoute v1 by @zhaohuabing in #8327
• fix attachedRoutes by @zirain in #8187
• chore: update testdata on main by @jukie in #8370
• docs: add custom redirect BTP task by @rudrakhp in #8357
• feat: Implement RoutingType BTP by @jukie in #8173
• Add retriableStatuses for healthchecks by @akardaspg in #8306
• [gatewayapi] skip unused BTP routing index work by @arkodg in #8375
• fix(host): eliminate spurious error logs in standalone mode by @codefromthecrypt in #8287
• feat: Support AlwaysEjectOneHost configuration in Outlier Detection by @Inode1 in #8149
• chore: remove existence check for v1 CRDs by @zhaohuabing in #8365
• feat(envoyextensionpolicy): Implement TLS configuration for WASM code source. by @achernev in #7865
• feat: invalid listener should not block IR by @zirain in #8194
• fix TestWasmTLSIndexers and test gen by @zhaohuabing in #8384
• feat: HTTPRoute support 303 307 308 redirect by @zirain in #8182
• chore: bump golang.org/x/net by @zirain in #8394
• fix: computeHosts doesn't work when listener and route both wildcard by @zirain in #8186
• docs: fix cors exemples in security-policy.md by @TanguyPatte in #8408
• fix: support cross-ns for SecretObjectReference by @zhaohuabing in #8074
• api: Add source type structure for dynamic modules by @jukie in #8359
• ci: fix flaky e2e tests by @zirain in #8388
• ci: run conformance test with standard channel by @zirain in #8367
• chore: fix gen by @zirain in #8418
• fix: aggregate xRoute/xPolicy statuses across GWCs in gateway-api runner by @zhaohuabing in #8387
• api: GeoIP by @zhaohuabing in #8002
• feat(securitypolicy): add MergeType support for policy merging by @rajatvig in #7918
• chore: lower the qps to mitigate flaky upgrade test by @zhaohuabing in #8415
• chore: fix gen by @zhaohuabing in #8426
• chore: fix gen check by @rudrakhp in #8437
• feat: support grpc web settings by @kkk777-7 in #8147
• build(deps): bump the actions group across 2 directories with 7 updates by @dependabot[bot] in #8433
• build(deps): bump the helm group across 1 directory with 5 updates by @dependabot[bot] in #8404
• build(deps): bump distroless/base-nossl from f8ebb45 to ae8c000 in /tools/docker/envoy-gateway by @dependabot[bot] in #8398
• build(deps): bump the gomod group across 1 directory with 12 updates by @dependabot[bot] in #8400
• chore: fix gen by @zirain in #8440
• test: fix flaky RouteStatNameTest and refactor by @Arpit529Srivastava in #8368
• e2e: remove HTTPRoute CORS test by @zirain in #8443
• fix: add ownerReferences to ratelimit ConfigMap and HPA by @Teja079 in #8358
• test: add unit tests for ratelimit UnitToSeconds and UnitToDuration by @archy-rock3t-cloud in #8396
• chore: fix oidc flakiness by @zhaohuabing in #8423
• fix: handle network errors in rate limit e2e tests by @rudrakhp in #8446
• chore: mute OSV scanner & Trivy by @zirain in #8444
• refactor/perf: use LuaPerRoute instead of FilterConfig by @rudrakhp in #8355
• e2e: reduce consistent hash flaky by @zirain in #8371
• fix: multiple gc e2e by @kkk777-7 in #8448
• build(deps): bump sigs.k8s.io/gateway-api-inference-extension from 1.3.1 to 1.4.0 in /examples/extension-server by @dependabot[bot] in #8402
• build(deps): bump the k8s-io group across 1 directory with 6 updates by @dependabot[bot] in #8401
• raise RL rule imit to 256 by @zhaohuabing in #8451
• fix oidc flakiness by @zhaohuabing in #8469
• api: make ConnectionLimit.Value optional by @felipesabadini in #8478
• build(deps): bump aquasecurity/trivy-action from 0.34.2 to 0.35.0 in the actions group across 1 directory by @dependabot[bot] in #8485
• Revert "api: add sourceCIDRs field in SecurityPolicy for L4 IP filtering" by @zhaohuabing in #8471
• chore: bump filippo.io/edwards25519 by @zirain in #8474
• build(deps): bump sigs.k8s.io/controller-runtime from 0.23.1 to 0.23.3 in /examples/extension-server by @dependabot[bot] in #8487
• build(deps): bump codespell from 2.4.1 to 2.4.2 in /tools/src/codespell by @dependabot[bot] in #8481
• fix: active health check respect endpoint hostname by @zirain in #8452
• build(deps): bump the helm group across 1 directory with 3 updates by @dependabot[bot] in #8488
• feat: support status_on_error field in external authorization by @AlexKrudu in #8432
• build(deps): bump the gomod group across 5 directories with 15 updates by @dependabot[bot] in #8482
• build(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0 in the k8s-io group across 1 directory by @dependabot[bot] in #8483
• build(deps): bump sigs.k8s.io/controller-runtime from 0.23.1 to 0.23.3 by @dependabot[bot] in #8484
• build(deps): bump sigs.k8s.io/mcs-api from 0.3.0 to 0.4.0 by @dependabot[bot] in #8486
• [release/v1.6] add release notes for v1.6.5 by @rudrakhp in #8504
• Add release notes for 1.7.1 by @cnvergence in #8493
• Add release notes news for v1.7.1 by @cnvergence in #8513
• [release/v1.6] update docs for v1.6.5 by @rudrakhp in #8515
• Bump last version in eg upgrade e2e test by @cnvergence in #8514
• e2e: ratelimit test not rely on the count of request by @zirain in #8472
• bump ratelimis version by @fbalicchia in #8465
• fix(ratelimit): expose metrics port to ratelimit container spec by @stekole in #8525
• chore: update stale action settings to clean up stale PRs by @rudrakhp in #8526
• feat(helm): add namespaceOverride support to gateway-helm chart by @honarkhah in #8281
• bump Gateway API to v1.5.1 by @zirain in #8533
• feat(api): add HTTP/2 connection keepalive to ClientTrafficPolicy and BackendTrafficPolicy by @rajatvig in #8215
• feat: add support for retry budget in BackendTrafficPolicy by @zirain in #8457
• e2e: fix ConnectionLimit test by @zirain in #8473
• feat: support stream idle timeout in BackendTrafficPolicy by @zhaohuabing in #8455
• feat: EDS modification hook by @zhaohuabing in #8240
• chore: raise the jwt provider limit to 16 by @zhaohuabing in #8543
• ci: fix ACTIONS_STEP_DEBUG not working by @zirain in #8517
• ci: rm gen-check action by @zirain in #8553
• chore: aggregate route status parents when they're more than the allowed cap(32) by @zhaohuabing in #8516
• fix merged example by @RicHincapie in #8563
• add e2e test for HTTPRouteHTTPSListenerDetectMisdirectedRequests by @zirain in #8558
• build(deps): bump distroless/base-nossl from ae8c000 to f71dcb6 in /tools/docker/envoy-gateway by @dependabot[bot] in #8546
• build(deps): bump the actions group across 1 directory with 4 updates by @dependabot[bot] in #8549
• fix: per-endpoint hostname override blocked by auto-generated wildcad host by @zirain in #8565
• feat/mtls add ClientValidationMode by @Julien-Beezeelinx in #8325
• fix(tcp): add SNI-based filter chain matching for TLS passthrough empty routes by @OliverBailey in #8521
• ci: fix netlify build by @zirain in #8571
• feat: upstream access log by @zirain in #8397
• chore: refactor JSONPatch by @zirain in #8497
• docs: fix terminology inconsistencies for External Authorization by @haruyama480 in #8539
• docs: ignore blog.envoyproxy.io by @zirain in #8574
• feat(loadbalancer): Add LoadBalancerType Client Side Weighted Round Robin by @altaiezior in #7407
• build(deps): bump loki from 6.54.0 to 6.55.0 in /charts/gateway-addons-helm in the helm group across 1 directory by @dependabot[bot] in #8550
• fix bug with grpcroute mirror filter by @aburanrbx in #8541
• fix: normalize CRLF line endings in htpasswd basic auth secrets by @stekole in #8557
• build(deps): bump the gomod group across 5 directories with 6 updates by @dependabot[bot] in #8548
• chore: update release schedule by @zhaohuabing in #8584
• feat: GeoIP by @zhaohuabing in #8453
• Bump version by @jukie in #8587
• chore: update grpc to fix osv scan by @zhaohuabing in #8586
• build(deps): bump busybox from b3255e7 to 1487d0a in /tools/docker/envoy-gateway by @dependabot[bot] in #8590
• build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #8593
• build(deps): bump the gomod group across 1 directory with 2 updates by @dependabot[bot] in #8591
• build(deps): bump the helm group across 1 directory with 3 updates by @dependabot[bot] in #8594
• build(deps): bump the k8s-io group across 1 directory with 6 updates by @dependabot[bot] in #8592
• [xds] stabilize listener-level Lua XDS filters to avoid listener drain by @arkodg in #8598
• docs: fix typos in RELEASING.md by @archy-rock3t-cloud in #8601
• chore: update basic auth error status by @zhaohuabing in #8589
• chore: update request buffer docs by @zhaohuabing in #8604
• docs: add note on case-insensitivity of header names by @lextiz in #8596
• Add Pollinate to Envoy Gateway adopters by @shavmohin in #8607
• fix: reject incompatible requestBuffer + httpUpgrade CTP by @zhaohuabing in #8605
• geoip docs by @zhaohuabing in #8585
• chore: update Performance Benchmark Report by @zhaohuabing in #8613
• feat: support invert in source match by @rudrakhp in #8407
• chore: fix osv scan by @zhaohuabing in #8615
• fix json report by @zhaohuabing in #8614
• chore: add benchmark report to the release process by @zhaohuabing in #8617
• feat: implement remote source dynamic modules by @jukie in #8579
• chore: fix e2e tests by @zirain in #8450
• feat: JSON log encoder uses abbreviated field keys by @zirain in #8555
• test: add unit tests for route sort precedence by @archy-rock3t-cloud in #8603
• feat(translator): make append_x_forwarded_host configurable in HTTPRouteFilter by @rborale5 in #8527
• fix: avoid metric increments on no-op delete reconcile paths by @felipesabadini in #8480
• chore: cswrr cleanup and e2e by @jukie in #8582
• chore: add make target for benchmark dashboard by @zhaohuabing in #8621
• feat(telemetry): add sampler config for OpenTelemetry tracing by @codefromthecrypt in #8529
• feat(ctp): add IgnoredUpgradeTypes to HTTP1Settings by @michalskalski in #8599
• build(deps): bump npm-check-updates from 19.6.6 to 20.0.0 in /site by @dependabot[bot] in #8641
• chore: fix metrics check in the rate limit e2e tests by @zhaohuabing in #8636
• build(deps): bump the gomod group across 1 directory with 2 updates by @dependabot[bot] in #8639
• build(deps): bump the actions group across 2 directories with 7 updates by @dependabot[bot] in #8640
• enterprise support: Add Procedure Technologies by @harshita375 in #8643
• fix typo by @Alireza-Mim in #8629
• build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #8642
• chore: bump API version by @zirain in #8644
• fix(telemetry): support BackendTLSPolicy for telemetry backends by @codefromthecrypt in #8545
• ci(fix): ensure Go binaries in published Docker images have correct module version by @shahar-h in #8275
• fix: restore failure-path metric recording for delete and HPA reconcile by @felipesabadini in #8656
• fix for duplicate cidr local rate limit rules by @erik-hunter in #8650
• feat: impl gateway tls.frontend/tls.backend by @zirain in #8380
• docs: fix Protol -> Protocol typo by @wiktor-k in #8657
• chore: remove cluster.LbPolicy usage by @jukie in #8637
• chore: align all helm calls to use go tool by @shahar-h in #8659
• ci: remove codecov workaround by @shahar-h in #8664
• ci: remove hardcoded KIND_NODE_TAG from release benchmark by @shahar-h in #8661
• chore: add lint check to enforce ubuntu-latest in workflow runs-on by @shahar-h in #8662
• Publish chart and docker image for rc.0 tags by @jukie in #8658
• ci: fix broken go-benchmark-test by @shahar-h in #8663
• chore: fix cve by @zirain in #8669
• ci: remove continue-on-error from go-benchmark-test by @shahar-h in #8670
• ci: pin checkout action by @shahar-h in #8674
• docs: clarify supported HTTP redirect status codes by @Aditya7880900936 in #8566
• feat: support grpc stats settings by @kkk777-7 in #8158
• Fix link to Tasks section in quickstart.md by @xCyberxx in #8618
• chore: pin npm tools by @shahar-h in #8672
• fix: status for mirror backend by @kkk777-7 in #8675
• ci: add github action for codex review on PRs by @arkodg in #8679
• build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #8684
• build(deps): bump sigs.k8s.io/mcs-api from 0.4.0 to 0.4.1 by @dependabot[bot] in #8683
• build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #8682
• fix(gatewayapi): add deprecated warning for clientValidation.optional by @officialasishkumar in #8609
• feat: add support for contrpl plane tracer by @zirain in #8551
• build(deps): bump the gomod group across 5 directories with 11 updates by @dependabot[bot] in #8681
• api: dynamic module lb by @jukie in #8638
• build(deps): bump actions/checkout from 6.0.1 to 6.0.2 in the actions group across 1 directory by @dependabot[bot] in #8697
• build(deps): bump the gomod group across 2 directories with 4 updates by @dependabot[bot] in #8696
• build(deps): bump the helm group across 1 directory with 2 updates by @dependabot[bot] in #8698
• fix: client certificate secret never delivered when it is exclusively referenced by a SecurityPolicy extAuth Backend by @zirain in #8654
• bump golang for CVE by @zirain in #8709
• set the status when EPP target to a MergeGateways with wrong kind by @fabian4 in #7490
• chore: update testdata to covered multiple listener in one gateway by @zirain in #8710
• fix: disable http3 when client tls is configured by @zhaohuabing in #8583
• fix: client certificate secret never delivered when it is exclusively referenced by a SecurityPolicy jwt/oidc Backend by @zirain in #8711
• chore: fix release issue gen by @rudrakhp in #8722
• remove DFP filter by @zhaohuabing in #8655
• build(deps): bump the gomod group across 1 directory with 2 updates by @dependabot[bot] in #8721
• api for id token forwarding by @zhaohuabing in #8691
• oidc: native oauth2 per-route config by @zhaohuabing in #8703
• chore: add review skill by @zhaohuabing in #8237
• feat: Support for merged EnvoyProxy settings by @mgs255 in #8169
• [ci] rm codex review action by @arkodg in #8726
• build(site): use npm ci and clean up docs CI pipeline by @shahar-h in #8694
• fix: followup for #8380 by @zirain in #8666
• chore: fix release issue WF by @rudrakhp in #8727
• docs: rename Contributions section to Community by @antonio-mazzini in #8427
• chore: update Go tools and resolve golangci-lint warnings by @shahar-h in #8740
• refactor: replace ptr.To with Go 1.26 new() builtin by @shahar-h in #8718
• fix: ContextExtensions merge behavior by @zhaohuabing in #8747
• fix: helm secrets rbac for gateway namespace with watch list of namespaces by @cnvergence in #8706
• build(deps): bump the actions group across 1 directory with 3 updates by @dependabot[bot] in #8758
• build(deps-dev): bump autoprefixer from 10.4.27 to 10.5.0 in /site by @dependabot[bot] in #8756
• build(deps): bump npm-check-updates from 20.0.0 to 21.0.0 in /site by @dependabot[bot] in #8757
• build(deps): bump the helm group across 1 directory with 3 updates by @dependabot[bot] in #8759
• [release/v1.6] add release notes for v1.6.6 by @rudrakhp in #8765
• ExtAuth: allow passing Route metadata to Ext Auth by @zhaohuabing in #8723
• [release/v1.6] add benchmark report for v1.6.6 by @rudrakhp in #8772
• [release/v1.6] update docs + release announcement for v1.6.6 by @rudrakhp in #8774
• docs: fix typo in page for http-request-headers by @picccard in #8752
• [release/v1.7] add release notes and docs announcement for v1.7.2 by @cnvergence in #8775
• [release/v1.7] add benchmark report for v1.7.2 by @cnvergence in #8779
• ci: optimize binary builds in build_and_test workflow by @shahar-h in #8777
• feat: support GatewayStaticAddresses conformance test by @cnvergence in #8395
• Fix rc.0 publish by @jukie in #8782
• fix: deep copy status in translator layer to avoid race by @rudrakhp in #8778
• feat: add per-rule XRateLimitOption to BackendTrafficPolicy by @zirain in #8742
• chore: add missing labels for the rl service account by @zhaohuabing in #8793
• chore: OSV scanner by @zirain in #8794
• fix: bound BackendTrafficPolicy rateLimit requests to uint32 max by @PatilHrushikesh in #8798
• fix: use per-route ratelimit filter by @zirain in #8741
• feat: add extraEnv support to envoy-gateway controller deployment by @girikuncoro in #8733
• api: add cel validation of MaxEjectionPercent by @kkk777-7 in #8804
• fix: force HTTP1 for upstream connections for WS and WSS backends by @zhaohuabing in #8699
• build(deps): bump the gomod group across 2 directories with 4 updates by @dependabot[bot] in #8811
• build(deps): bump the actions group across 1 directory with 2 updates by @dependabot[bot] in #8812
• chore: fix race and panic by @zirain in #8795
• build(deps): bump npm-check-updates from 21.0.0 to 21.0.3 in /site by @dependabot[bot] in #8810
• build(deps): bump sigs.k8s.io/gateway-api-inference-extension from 1.4.0 to 1.5.0 in /examples/extension-server by @dependabot[bot] in #8814
• build(deps): bump opentelemetry-collector from 0.150.0 to 0.150.1 in /charts/gateway-addons-helm in the helm group across 1 directory by @dependabot[bot] in #8815
• feat: add support for certificate fetching via SDS ref secret by @zirain in #8745
• docs: note ETag handling in response compression task by @alliasgher in #8824
• chore: bump docsy by @zirain in #8819
• build(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 in the actions group across 1 directory by @dependabot[bot] in #8829
• fix: correct duration dashboard panels to use proper PromQL queries by @felipesabadini in #8528
• test: use registry.k8s.io instead of staging by @jukie in #8831
• feat: Add BackendUtilization + WeightedZones support (WrrLocality Lb policy) by @jukie in #8634
• build(deps): bump opentelemetry-collector from 0.150.1 to 0.152.0 in /charts/gateway-addons-helm in the helm group across 1 directory by @dependabot[bot] in #8827
• docs(cors): show allowCredentials in the CORS task by @officialasishkumar in #8611
• Add support for extraVolumes and extraVolumeMounts to EG deployment by @mkhpalm in #8801
• api: add cel validation of GrpcStatus by @kkk777-7 in #8803
• conformance: update skipped features by @zirain in #8837
• e2e: add test for watched namespace by @zhaohuabing in #8786
• performance: use cached kube client for the infra runner by @zhaohuabing in #8764
• api: add bandwidth limit by @kkk777-7 in #8630
• fix: reason with multiple errors rejected validation by @zirain in #8859
• feat: support overriding ext_auth path by @rudrakhp in #8612
• [release/v1.6] update docs for v1.6.7 by @rudrakhp in #8865
• feat(chart): Allow configuring envoy proxy image via helm chart by @mgs255 in #8785
• [release/v1.6] add v1.6.7 benchmark data by @rudrakhp in #8874
• feat(extensionManager): add support for multiple ExtensionManagers with sequential chaining by @toffentoffen in #8458
• [release/v1.6] bump v1.6 in docs to v1.6.7 by @rudrakhp in #8875
• chore: update api docs for the default EnvoyProxy by @zhaohuabing in #8866
• feat: bandwidth limit by @kkk777-7 in #8862
• fix: dpanic in logger by @rudrakhp in #8880
• feat: Add source to responseOverride by @lboynton in #8391
• build(deps): bump npm-check-updates from 21.0.3 to 22.0.1 in /site by @dependabot[bot] in #8882
• build(deps): bump go.uber.org/zap from 1.27.1 to 1.28.0 by @dependabot[bot] in #8884
• build(deps): bump the helm group across 1 directory with 4 updates by @dependabot[bot] in #8885
• chore: update JSONPatch testdata by @zirain in #8877
• feat: cross ns policy attachment by @zhaohuabing in #8676
• feat: add admission control to BackendTrafficPolicy by @jukie in #8872
• v1.8.0-rc.1 release notes by @jukie in #8900
• bump ratelimit, dynamic modules, and proxy versions for v1.8.0-rc.1 by @jukie in #8902

New Contributors

• @dylanmtaylor made their first contribution in #8116
• @twandja made their first contribution in #8138
• @SadmiB made their first contribution in #7864
• @jaffarkeikei made their first contribution in #8122
• @Junnygram made their first contribution in #7953
• @oliverbaehler made their first contribution in #7977
• @krishicks made their first contribution in #8168
• @jess-belliveau made their first contribution in #8185
• @gaganhr94 made their first contribution in #8078
• @cryoshida made their first contribution in #7959
• @6ixfalls made their first contribution in #8183
• @NilsGriebner made their first contribution in #8225
• @akardaspg made their first contribution in #8306
• @achernev made their first contribution in #7865
• @TanguyPatte made their first contribution in #8408
• @Arpit529Srivastava made their first contribution in #8368
• @Teja079 made their first contribution in #8358
• @felipesabadini made their first contribution in #8478
• @fbalicchia made their first contribution in #8465
• @stekole made their first contribution in #8525
• @honarkhah made their first contribution in #8281
• @RicHincapie made their first contribution in #8563
• @Julien-Beezeelinx made their first contribution in #8325
• @OliverBailey made their first contribution in #8521
• @haruyama480 made their first contribution in #8539
• @altaiezior made their first contribution in #7407
• @aburanrbx made their first contribution in #8541
• @lextiz made their first contribution in #8596
• @shavmohin made their first contribution in #8607
• @rborale5 made their first contribution in #8527
• @harshita375 made their first contribution in #8643
• @Alireza-Mim made their first contribution in #8629
• @erik-hunter made their first contribution in #8650
• @wiktor-k made their first contribution in #8657
• @xCyberxx made their first contribution in #8618
• @officialasishkumar made their first contribution in #8609
• @antonio-mazzini made their first contribution in #8427
• @picccard made their first contribution in #8752
• @PatilHrushikesh made their first contribution in #8798
• @girikuncoro made their first contribution in #8733
• @alliasgher made their first contribution in #8824
• @mkhpalm made their first contribution in #8801
• @toffentoffen made their first contribution in #8458

Full Changelog: v1.7.2...v1.8.0-rc.1