🎉 Welcome to the v2.2.9 release of the kgateway project!
Release Notes
Changes since v2.2.8
Bug Fixes
- Fix a reconnect-time xDS race where Envoy could briefly receive routes and listeners before all referenced backend clusters were present, causing transient NC/500 responses during controller restart. Uses a brief first-connect grace period (configurable via KGW_XDS_FIRST_CONNECT_DELAY). (#13868, #14386)
- Fixed TrafficPolicy retry translation for HTTPS listeners by applying retry policy at route level. (#14304)
- Fixed north-south traffic to a global service continuing to route to a local pod for the duration of its termination grace period. kgateway now drains a terminating pod (deletionTimestamp set) from ServiceEntry-derived endpoints and fails over to a healthy peer-cluster endpoint, consistent with the east-west (ztunnel) path and the Kubernetes Service backend path. (#14334)
- Fixed TrafficPolicy validation to include retry and timeout configuration. (#14337)
- kgateway no longer overwrites an existing Kubernetes Service for a Gateway unless the Service has a matching Gateway ownerReference or kgateway ownership metadata. (#14350)
- Fixed TrafficPolicy retry translation for HTTPS listeners by applying retry policy at route level. (#14392)
Installation
The kgateway project is available as a Helm chart and docker images.
Helm Charts
The Helm charts are available at:
- cr.kgateway.dev/kgateway-dev/charts/kgateway.
Docker Images
The docker images are available at:
- cr.kgateway.dev/kgateway-dev/kgateway:v2.2.9
- cr.kgateway.dev/kgateway-dev/sds:v2.2.9
- cr.kgateway.dev/kgateway-dev/envoy-wrapper:v2.2.9
Quickstart
Try installing this release:
helm install kgateway-crds oci://cr.kgateway.dev/kgateway-dev/charts/kgateway-crds --version v2.2.9 --namespace kgateway-system --create-namespace
helm install kgateway oci://cr.kgateway.dev/kgateway-dev/charts/kgateway --version v2.2.9 --namespace kgateway-system --create-namespace
For detailed installation instructions and next steps, please visit our quickstart guide.