Dependency Bumps
- golang/go has been upgraded to v1.23.3.
- solo-io/envoy-gloo has been upgraded to 1.31.2-patch3.
- solo-io/k8s-utils has been upgraded to v0.8.1.
New Features
- Add
glooctl proxy snapshotcommand, which can be pointed at a Gloo Gateway instance and will produce a zip archive containing all Envoy state, for the purposes of simplified issue reporting and triage. (https://github.com/solo-io/solo-projects/issues/7131) - Add
listenerTcpStats: true|falseto the ListenerOptions API. Iftruewill enable Envoy TCP stats collection for all listeners. This can be useful for L4 debugging. (https://github.com/solo-io/solo-projects/issues/7176) - Added support for early header manipulation on Gateways. This feature allows headers to be manipulated before significant processing and routing decisions. It affords the ability to add or remove headers that affect request processing and can be used to implement override headers. This can be configured by setting the
gateway.spec.httpGateway.options.httpConnectionManagerSettings.earlyHeaderMutationfield. The headersToAdd field will add key-value pair headers to the request if not already present or overwrite them unless append is set to true. The headersToRemove field removes the specified headers and is processed after the headers have been added. (#9604) - Support exportTo for Istio's DestinationRule. (https://github.com/solo-io/solo-projects/issues/7101)
- Enable modifying the span name for tracing purposes using InjaTemplates in the transformation filter. More information on OpenTelemetry span names can be found here: https://opentelemetry.io/docs/specs/semconv/http/http-spans/ (#9848)
- Split the validating webhook to allow different failure policies for gloo/non-gloo resources. The split out webhook for kubernetes resources shares all configuration with the existing webhook except for the failure policy, which can be set with
gateway.validation.kubeCoreFailurePolicy(#10247)
Fixes
- Fix issue where Gloo Gateway did not respect the cluster domain for the xds host address. (#10268)
- Adds basic support for Gateway API TCPRoute. (#10073)
- Makes the Gateway API TCPRoute controller optional. (#10304)
- Removes the endpoints resource from Helm RBAC manifest when kubeGateway is enabled. (#10323)
- Updates the gateway2 project to use EndpointSlice instead of Endpoints for creating upstream endpoints. (https://github.com/solo-io/solo-projects/issues/6910)